High severity8.8NVD Advisory· Published May 18, 2017· Updated May 13, 2026
CVE-2017-9069
CVE-2017-9069
Description
In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
modx/revolutionPackagist | < 2.5.7 | 2.5.7 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/modxcms/revolution/pull/13423nvdPatchVendor AdvisoryWEB
- citadelo.com/en/2017/04/modx-revolution-cms/nvdExploitPatchThird Party Advisory
- github.com/advisories/GHSA-23gj-x27g-r34fghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-9069ghsaADVISORY
- citadelo.com/en/2017/04/modx-revolution-cmsghsaWEB
News mentions
0No linked articles in our index yet.