What’s Vulnerable › Vulnerabilities

CVE-2017-1000194

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-17 · updated 2026-06-17
• Weakness: CWE-434

Description

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

Affected products

• octobercms october: through 1.0.412

References

• https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224
• https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224

Get alerted when CVE-2017-1000194 or the next vulnerability affects your stack