CVE-2017-1000197

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt