october/cms
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Local File read vulnerability in OctoberCMS | october/cms | Composer | Medium | Fix reported | |
| Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled. | october/cms | Composer | Medium | Fix reported | |
| Bypass of fix for CVE-2020-15247, Twig sandbox escape | october/cms | Composer | Low | Fix reported | |
| Bypass of fix for CVE-2020-26231, Twig sandbox escape | october/cms | Composer | Medium | Fix reported | |
| Upload whitelisted files to any directory in OctoberCMS | october/cms | Composer | Low | Fix reported | |
| Local File Inclusion by unauthenticated users | october/cms | Composer | High | Fix reported | |
| Arbitrary File Deletion vulnerability in OctoberCMS | october/cms | Composer | Medium | Fix reported | |
| October CMS PHP Code Execution | october/cms | Composer | High | No fix reported |