CVE-2015-5612
medium
CVSS v3
—
CVSS v2
4.3
VIR risk
4.3
Description
October CMS XSS In Caption Tag of Profile
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://github.com/octobercms/october/issues/1302
Vendor advisory: cve@mitre.org — https://github.com/octobercms/october/commit/8a4ac533e5cd6b8f92e9ef19fbfbb2f505dc7a9a
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Packagist | october/october | <1.0.319 | 1.0.319 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| octobercms | october | - | |
References
CWEs
CWE-79
Verify integrity in audit chain (admin only). AS-IS.