CVE-2017-16244 October CMS CSRF
HighCVSS 8.8
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account. The attack bypasses a protection mechanism involving X-CSRF headers and CSRF tokens via a certain _handler postback variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| october/october(Packagist) | < 1.0.427 | 1.0.427 |
| october/october(Packagist) | = v1.0.319 | No fix listed |
| october/october(Packagist) | = v1.0.320 | No fix listed |
| october/october(Packagist) | = v1.0.321 | No fix listed |
| october/october(Packagist) | = v1.0.322 | No fix listed |
| october/october(Packagist) | = v1.0.323 | No fix listed |
| october/october(Packagist) | = v1.0.324 | No fix listed |
| october/october(Packagist) | = v1.0.325 | No fix listed |
| october/october(Packagist) | = v1.0.326 | No fix listed |
| october/october(Packagist) | = v1.0.327 | No fix listed |
| october/october(Packagist) | = v1.0.328 | No fix listed |
| october/october(Packagist) | = v1.0.329 | No fix listed |
| october/october(Packagist) | = v1.0.330 | No fix listed |
| october/october(Packagist) | = v1.0.331 | No fix listed |
| october/october(Packagist) | = v1.0.332 | No fix listed |
| october/october(Packagist) | = v1.0.333 | No fix listed |
| october/october(Packagist) | = v1.0.334 | No fix listed |
| october/october(Packagist) | = v1.0.335 | No fix listed |
| october/october(Packagist) | = v1.0.336 | No fix listed |
| october/october(Packagist) | = v1.0.337 | No fix listed |
| october/october(Packagist) | = v1.0.338 | No fix listed |
| october/october(Packagist) | = v1.0.339 | No fix listed |
| october/october(Packagist) | = v1.0.340 | No fix listed |
| october/october(Packagist) | = v1.0.341 | No fix listed |
| october/october(Packagist) | = v1.0.342 | No fix listed |
Show 86 more
| Product | Affected versions | Fixed in |
|---|---|---|
| october/october(Packagist) | = v1.0.343 | No fix listed |
| october/october(Packagist) | = v1.0.344 | No fix listed |
| october/october(Packagist) | = v1.0.345 | No fix listed |
| october/october(Packagist) | = v1.0.346 | No fix listed |
| october/october(Packagist) | = v1.0.347 | No fix listed |
| october/october(Packagist) | = v1.0.348 | No fix listed |
| october/october(Packagist) | = v1.0.349 | No fix listed |
| october/october(Packagist) | = v1.0.350 | No fix listed |
| october/october(Packagist) | = v1.0.351 | No fix listed |
| october/october(Packagist) | = v1.0.352 | No fix listed |
| october/october(Packagist) | = v1.0.353 | No fix listed |
| october/october(Packagist) | = v1.0.354 | No fix listed |
| october/october(Packagist) | = v1.0.355 | No fix listed |
| october/october(Packagist) | = v1.0.356 | No fix listed |
| october/october(Packagist) | = v1.0.357 | No fix listed |
| october/october(Packagist) | = v1.0.358 | No fix listed |
| october/october(Packagist) | = v1.0.359 | No fix listed |
| october/october(Packagist) | = v1.0.360 | No fix listed |
| october/october(Packagist) | = v1.0.361 | No fix listed |
| october/october(Packagist) | = v1.0.362 | No fix listed |
| october/october(Packagist) | = v1.0.363 | No fix listed |
| october/october(Packagist) | = v1.0.364 | No fix listed |
| october/october(Packagist) | = v1.0.365 | No fix listed |
| october/october(Packagist) | = v1.0.366 | No fix listed |
| october/october(Packagist) | = v1.0.367 | No fix listed |
| october/october(Packagist) | = v1.0.368 | No fix listed |
| october/october(Packagist) | = v1.0.369 | No fix listed |
| october/october(Packagist) | = v1.0.370 | No fix listed |
| october/october(Packagist) | = v1.0.371 | No fix listed |
| october/october(Packagist) | = v1.0.372 | No fix listed |
| october/october(Packagist) | = v1.0.373 | No fix listed |
| october/october(Packagist) | = v1.0.374 | No fix listed |
| october/october(Packagist) | = v1.0.375 | No fix listed |
| october/october(Packagist) | = v1.0.376 | No fix listed |
| october/october(Packagist) | = v1.0.377 | No fix listed |
| october/october(Packagist) | = v1.0.378 | No fix listed |
| october/october(Packagist) | = v1.0.379 | No fix listed |
| october/october(Packagist) | = v1.0.380 | No fix listed |
| october/october(Packagist) | = v1.0.381 | No fix listed |
| october/october(Packagist) | = v1.0.382 | No fix listed |
| october/october(Packagist) | = v1.0.383 | No fix listed |
| october/october(Packagist) | = v1.0.384 | No fix listed |
| october/october(Packagist) | = v1.0.385 | No fix listed |
| october/october(Packagist) | = v1.0.386 | No fix listed |
| october/october(Packagist) | = v1.0.387 | No fix listed |
| october/october(Packagist) | = v1.0.388 | No fix listed |
| october/october(Packagist) | = v1.0.389 | No fix listed |
| october/october(Packagist) | = v1.0.390 | No fix listed |
| october/october(Packagist) | = v1.0.391 | No fix listed |
| october/october(Packagist) | = v1.0.392 | No fix listed |
| october/october(Packagist) | = v1.0.393 | No fix listed |
| october/october(Packagist) | = v1.0.394 | No fix listed |
| october/october(Packagist) | = v1.0.395 | No fix listed |
| october/october(Packagist) | = v1.0.396 | No fix listed |
| october/october(Packagist) | = v1.0.397 | No fix listed |
| october/october(Packagist) | = v1.0.398 | No fix listed |
| october/october(Packagist) | = v1.0.399 | No fix listed |
| october/october(Packagist) | = v1.0.400 | No fix listed |
| october/october(Packagist) | = v1.0.401 | No fix listed |
| october/october(Packagist) | = v1.0.402 | No fix listed |
| october/october(Packagist) | = v1.0.403 | No fix listed |
| october/october(Packagist) | = v1.0.404 | No fix listed |
| october/october(Packagist) | = v1.0.405 | No fix listed |
| october/october(Packagist) | = v1.0.406 | No fix listed |
| october/october(Packagist) | = v1.0.407 | No fix listed |
| october/october(Packagist) | = v1.0.408 | No fix listed |
| october/october(Packagist) | = v1.0.409 | No fix listed |
| october/october(Packagist) | = v1.0.410 | No fix listed |
| october/october(Packagist) | = v1.0.411 | No fix listed |
| october/october(Packagist) | = v1.0.412 | No fix listed |
| october/october(Packagist) | = v1.0.413 | No fix listed |
| october/october(Packagist) | = v1.0.414 | No fix listed |
| october/october(Packagist) | = v1.0.415 | No fix listed |
| october/october(Packagist) | = v1.0.416 | No fix listed |
| october/october(Packagist) | = v1.0.417 | No fix listed |
| october/october(Packagist) | = v1.0.418 | No fix listed |
| october/october(Packagist) | = v1.0.419 | No fix listed |
| october/october(Packagist) | = v1.0.420 | No fix listed |
| october/october(Packagist) | = v1.0.421 | No fix listed |
| october/october(Packagist) | = v1.0.422 | No fix listed |
| october/october(Packagist) | = v1.0.423 | No fix listed |
| october/october(Packagist) | = v1.0.424 | No fix listed |
| october/october(Packagist) | = v1.0.425 | No fix listed |
| october/october(Packagist) | = v1.0.426 | No fix listed |
| october/october(Packagist) | <= 1.0.426 | No fix listed |
| octobercms october | = 1.0.426 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com product
- 43106 exploit third-party-advisory vdb-entry
- github.com