Account Takeover in Octobercms
CVE-2021-32648

8.2HIGH

Key Information:

Vendor: Octobercms
Status: October
Vendor: CVE Published:; 26 August 2021

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 93%🦅 CISA Reported

What is CVE-2021-32648?

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5.

CISA has reported CVE-2021-32648

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2021-32648 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

october >= 1.0.471, < 1.0.472 < 1.0.471, 1.0.472

october >= 1.1.1, < 1.1.5 < 1.1.1, 1.1.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-32648
Created by Immersive-Labs-Sec

CVE-2021-32648
Created by daftspunk