Skip to content
OpenAdvisories

Archive

3 May 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.2

    Bypass of fix for CVE-2020-26231, Twig sandbox escape

    October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247. An authenticated backend user …