GHSA-x4q7-m6fp-4v9v

    Dashboard / Vulnerabilities / GHSA-x4q7-m6fp-4v9v

    GHSA-x4q7-m6fp-4v9v

    Published: 13 Oct 2022Last Modified: 8 Nov 2023

    Summary: October CMS Safe Mode bypass leads to authenticated Remote Code Execution

    Details: ### Impact This vulnerability only affects installations that rely on the safe mode restriction, commonly used when providing public access to the admin panel. Assuming an attacker has access to the admin panel and permission to open the "Editor" section, they can bypass the Safe Mode (`cms.safe_mode`) restriction to introduce new PHP code in a CMS template using a specially crafted request. ### Patches The issue has been patched in v2.2.34 and v3.0.66 ### References Credits to: - David Miller ### For more information If you have any questions or comments about this advisory: - Email us at [[email protected]](mailto:[email protected])

    References: https://github.com/octobercms/october/security/advisories/GHSA-x4q7-m6fp-4v9v, https://nvd.nist.gov/vuln/detail/CVE-2022-35944, https://github.com/octobercms/october

    Affected packages

    Package

    Name: october/system

    Purl: pkg:composer/october/system

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 2.0.0
    Fixed -2.2.34

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-x4q7-m6fp-4v9v | CVE-DB