What’s Vulnerable › Vulnerabilities

CVE-2017-1000197

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-17 · updated 2026-06-17
• Weakness: CWE-417

Description

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.

Affected products

• octobercms october: through 1.0.412

References

• https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-eef90a4e3585febf6489916dc242d0ceR241
• https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-eef90a4e3585febf6489916dc242d0ceR241

Get alerted when CVE-2017-1000197 or the next vulnerability affects your stack