october/system Security Advisories for v1.0.474 (2)
-
[HIGH] October CMS upload process vulnerable to RCE via Race Condition
PKSA-yr75-7y9f-cxw9 CVE-2022-24800 GHSA-8v7h-cpc2-r8jp
Affected version: >=2.0.0,<2.2.15|>=1.1.0,<1.1.12|<1.0.476
Reported by:
GitHub -
[MEDIUM] Missing server signature validation in OctoberCMS
PKSA-9y13-4h42-rz75 CVE-2022-23655 GHSA-53m6-44rc-h2q5
Affected version: <1.0.475|>=1.1.0,<1.1.11
Reported by:
GitHub