CVE-2020-5295 EXPLOIT
4.8
MEDIUM · CVSS 3.1 · EPSS 7.4% (pctl 94)
Patch early
A public exploit exists.
Description
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).
Scoring
| CVSS | 4.8 (MEDIUM, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
| EPSS | 7.37% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-98 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2020-06-03 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| octobercms | october |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | October CMS Build 465 - Arbitrary File Read Exploit (Authenticated) | 2020-11-13 |
References
- http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html
- http://seclists.org/fulldisclosure/2020/Aug/2
- https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc
- https://github.com/octobercms/october/security/advisories/GHSA-r23f-c2j5-rx2f
- http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html
- http://seclists.org/fulldisclosure/2020/Aug/2
- https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc
- https://github.com/octobercms/october/security/advisories/GHSA-r23f-c2j5-rx2f
→ the Explorer · watch your stack · NVD