CVE-2022-35944CWE-94

October CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)

Medium · published October 13, 2022

CVSS v3.1
6.2
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

October is a self-hosted Content Management System (CMS) platform based on the Laravel PHP Framework. This vulnerability only affects installations that rely on the safe mode restriction, commonly used when providing public access to the admin panel. Assuming an attacker has access to the admin panel and permission to open the "Editor" section, they can bypass the Safe Mode (`cms.safe_mode`) restriction to introduce new PHP code in a CMS template using a specially crafted request. The issue has been patched in versions 2.2.34 and 3.0.66.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01044 · 63.8th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2022-10-13T00:00Z
EPSS history
Timeline
  • 13 OCT 00:00Z
    October CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)
    cvelistv5