CVE-2023-25365: Malicious File Upload
Published Feb 8, 2024
·Updated
Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3
Affected Software
2 affected components
composer/october/october<=3.2.0
October CMS Debugbar=3.2.0
Event History
Feb 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 9, 2024
Advisory Published
via GitHub·12:31 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-25365?
CVE-2023-25365 is classified as a high severity Cross Site Scripting vulnerability.
2
How do I fix CVE-2023-25365?
To fix CVE-2023-25365, update October CMS to a version that addresses the vulnerability.
3
Who is affected by CVE-2023-25365?
CVE-2023-25365 affects users of October CMS version 3.2.0.
4
What type of attack can CVE-2023-25365 facilitate?
CVE-2023-25365 can allow a local attacker to execute arbitrary code through file uploads.
5
What is the impact of CVE-2023-25365?
The impact of CVE-2023-25365 includes potential unauthorized access and execution of malicious scripts.