CVE-2021-29487GHSA-H76R-VGF3-J6W5
Authentication bypass in Octobercms
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.0.472, 1.1.5
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can exploit this vulnerability to bypass authentication and takeover of and user account on an October CMS server. The vulnerability is exploitable by unauthenticated users via a specially crafted request. This only affects frontend users and the attacker must obtain a Laravel secret key for cookie encryption and signing in order to exploit this vulnerability. The issue has been patched in Build 472 and v1.1.5.
Timeline
- CVE published
- Record last updated
Affected versions
- octobercms october
From 1.0.471 · fixed in 1.0.472; From 1.1.1 · fixed in 1.1.5
- october/systemPackagist
fixed in 1.0.472
- october/systemPackagist
From 1.1.1 · fixed in 1.1.5