Executive brief
October System module has a Reflected XSS via X-October-Request-Handler Header
Affected products
- Packagist october/system
Junglewise Threat Intelligence
CVE-2024-25637: October System module has a Reflected XSS via X-October-Request-Handler Header
CVE-2024-25637 · Severity: low · CVSS 3.1 · Published 2024-06-26
Technologies: october/system (Packagist). Vendors: Packagist.
Related threats
- October CMS Allows Unprotected SVG Rename in Media Manager
- October System module has an Open Redirect for Administrator Accounts
- October CMS stored XSS by authenticated backend user with improper configuration
- October CMS safe mode bypass using Twig sandbox escape
- October CMS safe mode bypass using Page template injection