← All advisories

Medium severity5.4NVD Advisory· Published Jul 26, 2023· Updated Jun 17, 2026

CVE-2023-37692

CVE-2023-37692

Description

An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
october/octoberPackagist	<= 3.4.4	—

Affected products

3

October/CMSdescription
ghsa-coords
pkg:composer/october/october
Range: <= 3.4.4
Octobercms/October
cpe:2.3:a:octobercms:october:3.4.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated/nvdExploitThird Party Advisory
github.com/advisories/GHSA-r47v-rxcg-p28jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-37692ghsaADVISORY
okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticatedghsaWEB

News mentions

0

No linked articles in our index yet.