CVE-2020-5297: Upload whitelisted files to any directory in OctoberCMS
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to upload jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, xml files to any directory of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission. Issue has been patched in Build 466 (v1.0.466).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-5297?
CVE-2020-5297 is a vulnerability in OctoberCMS that allows an attacker to upload various file types to any directory of an October CMS server.
What is the severity of CVE-2020-5297?
The severity of CVE-2020-5297 is medium (2.7).
How can an attacker exploit CVE-2020-5297?
An attacker can exploit CVE-2020-5297 by uploading files such as jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, or xml to any directory of an October CMS server.
Which versions of OctoberCMS are affected by CVE-2020-5297?
OctoberCMS versions from 1.0.319 to 1.0.466 are affected by CVE-2020-5297.
Is there a fix available for CVE-2020-5297?
Yes, the fix for CVE-2020-5297 can be found in OctoberCMS version 1.0.466 and later.