CVE-2017-1000454: High severity simple cms vulnerability
Published Jan 2, 2018
·Updated
CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1
Affected Software
2 affected components
CMSmadesimple CMS Made Simple<2.2
CMSmadesimple CMS Made Simple>=2.2.1
Event History
Jan 2, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1000454?
CVE-2017-1000454 has a moderate severity rating due to its potential for local file read and local file inclusion vulnerabilities.
2
How do I fix CVE-2017-1000454?
To fix CVE-2017-1000454, you should upgrade to CMS Made Simple version 2.2.2 or later.
3
Which versions of CMS Made Simple are affected by CVE-2017-1000454?
CMS Made Simple versions 2.1.6, 2.2, and 2.2.1 are affected by CVE-2017-1000454.
4
What type of vulnerability is CVE-2017-1000454?
CVE-2017-1000454 is a Smarty Template Injection vulnerability found in CMS Made Simple.
5
What are the consequences of exploiting CVE-2017-1000454?
Exploiting CVE-2017-1000454 can lead to unauthorized local file read and local file inclusion on affected CMS Made Simple installations.