October CMS は、Laravel PHP Framework に基づいた CMS プラットフォームです。影響を受けるバージョンの october/system パッケージで、攻撃者がアカウントパスワードのリセットをリクエストし、特別に細工されたリクエストを使用してアカウントへのアクセス権を取得する可能性があります。

October CMS 是基于 Laravel PHP Framework 的 CMS 平台。在受影响的 october/system 程序包版本中，攻击者可请求帐户密码重置，然后使用特别构建的请求获得该帐户的访问权限。

October CMS 是以 Laravel PHP 架構為基礎的 CMS 平台。在受影響的 october/system 套件版本中，攻擊者可要求重設帳戶密碼，然後使用特製的要求取得帳戶的存取權。

October CMS is a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the
    october/system package an attacker can request an account password reset and then gain access to the
    account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5.
    (CVE-2021-32648)

ID	Name	Product	Family	Published	Updated	Severity
113505	October CMS 1.0.471 / 1.1.1 < 1.1.5 不適切な認証	Web App Scanning	Component Vulnerability	1/6/2023	1/6/2023	critical
113505	October CMS 1.0.471/1.1.1 < 1.1.5 身份验证不当	Web App Scanning	Component Vulnerability	1/6/2023	1/6/2023	critical
113505	October CMS 1.0.471 / 1.1.1 < 1.1.5 不當驗證	Web App Scanning	Component Vulnerability	1/6/2023	1/6/2023	critical
113505	October CMS 1.0.471 / 1.1.1 < 1.1.5 Improper Authentication	Web App Scanning	Component Vulnerability	1/6/2023	1/6/2023	critical
417198	SCA: security update for october/system (GHSA-mxr5-mc97-63rc)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	critical
417198	SCA: security update for october/system (GHSA-mxr5-mc97-63rc)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical