Read the docs

October CMS

Records64All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

October CMS records in CISA KEV
TI-2021-12316 October CMS Improper Authentication Priority CRITICAL 96KEV 2022-01-18

Components

Products in the NVD configurations · select one to filter the records
October 57 records CRITICAL Debugbar 1 record MEDIUM

Records

1 record in Debugbar · all components

TI-2020-08967 CVE-2020-11094 · GHSA-c8wh-6jw4-2h79

Potential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar

Priority MEDIUM 44

The October CMS debugbar plugin before version 3.1.0 contains a feature where it will log all requests (and all information pertaining to each request including session data) whenever it is enabled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2020-06-03 Fixed in 3.1.0 CWE-532
Open these records in search →