October CMS vulnerabilities
We track 1 vulnerability in October CMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest October CMS vulnerabilities
- 7.3 High severity
October CMS: Server-Side Request Forgery
A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may b