CVE-2018-1999009

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function)…

published July 23, 2018

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears to have been fixed in Build 437.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02391 · 83.8th percentile
Published
2018-07-23T15:00Z
EPSS history
Timeline
  • 23 JUL 15:00Z
    October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function)…
    cvelistv5