CVE Catalog
CVE-2017-1000197
CriticalSummary
October CMS version 412 is vulnerable to file path modification in asset move functionality, potentially allowing the creation of malicious files on the server.
Risk Assessment
Exploitation of this vulnerability could lead to server compromise by introducing malicious software, threatening the organization's data security.
Recommendation
It is recommended to upgrade to the latest version of October CMS to mitigate this vulnerability and to monitor the server for unauthorized files.
Original NVD description (English source)
October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.