CVE-2017-1000197: Critical severity October CMS Debugbar vulnerability
Published Nov 17, 2017
·Updated
October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.
Affected Software
1 affected component
October CMS Debugbar<=1.0.412
Remediation
Event History
Nov 17, 2017
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is CVE-2017-1000197?
CVE-2017-1000197 is a vulnerability in October CMS build 412 that allows for file path modification in asset move functionality, resulting in the creation of malicious files on the server.
2
Is October CMS build 412 affected by CVE-2017-1000197?
Yes, October CMS build 412 is vulnerable to CVE-2017-1000197.
3
What is the severity of CVE-2017-1000197?
CVE-2017-1000197 has a severity level of critical.
4
How does CVE-2017-1000197 affect October CMS?
CVE-2017-1000197 allows an attacker to modify file paths in the asset move functionality of October CMS, leading to the creation of malicious files on the server.
5
Is there a fix for CVE-2017-1000197?
Yes, upgrading to a version higher than 1.0.412 fixes the vulnerability caused by CVE-2017-1000197.