9.1
CVSSv3

CVE-2021-32648

Published: 26/08/2021 Updated: 07/07/2023
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 571
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

octobercms october

Github Repositories

WhisperGate Indicators of Compromise SHA256 hash of The installer component for the bootloader - a196c6b8ffcb97ffb276d04f354696e2391311db3841ae16c8c9f56f36a38e92 The destructive wiping operation has the following pseudocode: for i_disk between 0 and total_detected_disk_count do for i_sector between 1 and total_disk_sector_count, i_sector += 199, do overwrite disk i_disk

Patch your code for October CMS Auth Bypass CVE-2021-32648

CVE-2021-32648 Patch your code for October CMS Auth Bypass CVE-2021-32648 Instructions Open the file vendor/october/rain/src/Auth/Models/Userphp Perform the patch found in these diff notes Save the file Overview You are converting a loose comparison to a strict comparison by replacing two (2) equal signs == with three (3) equal signs === This blocks the attack vector as des

Proof Of Concept code for OctoberCMS Auth Bypass CVE-2021-32648

CVE-2021-32648 Proof Of Concept code for OctoberCMS Auth Bypass CVE-2021-32648

Ukraine <> Russia Cyber Intelligence Tracker Introduction Vulnerabilities Exploited Malware's Used Cyber Groups MITRE ATT&CK Techniques Used By Threat Actors IOCs C2C Server Relations Reports & Credits Contribution Introduction: This repository is aimed at curating and tracking threat intelligence published in a single location, enabling def