CVE-2023-37692

MediumCVSS 5.4

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile - higher than 38% of all known CVEs

Summary

Version 3.4.4 of October CMS contains a vulnerability that allows arbitrary file uploads, enabling attackers to execute arbitrary code via a crafted file.

Risk Assessment

This vulnerability may lead to remote code execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to upgrade to the latest version of October CMS and implement appropriate security measures for file uploads.

Original NVD description (English source)

An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file.