PT-2022-10089
CVE-2021-32649
·
تاريخ النشر
2022-01-14
·
تاريخ التحديث
2022-08-05
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
October CMS versions prior to 1.0.473 and 1.1.6
Description
The issue allows an attacker with "create, modify and delete website pages" privileges in the backend to execute PHP code by running specially crafted Twig code in the template markup.
Recommendations
For versions prior to 1.0.473, update to version 1.0.473 or apply the patch to the installation manually as a workaround.
For versions prior to 1.1.6, update to version 1.1.6 or apply the patch to the installation manually as a workaround.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾