CVE-2021-32648
HIGH KEV NUCLEIOctober CMS < 1.1.5 and System < 1.0.472 - Authentication Bypass via Password Reset
Title source: llmExploitation Summary
CVE-2021-32648 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 18, 2022. EIP tracks 2 public exploits. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-32648, an authentication bypass vulnerability in OctoberCMS. The exploit automates the process of resetting the admin password by bypassing token validation, allowing an attacker to gain administrative access.
Description
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5.
Exploits (2)
This repository contains a functional exploit for CVE-2021-32648, an authentication bypass vulnerability in OctoberCMS. The exploit automates the process of resetting the admin password by bypassing token validation, allowing an attacker to gain administrative access.
The repository contains a functional exploit for CVE-2021-32648, an authentication bypass vulnerability in OctoberCMS. The exploit automates the process of resetting the admin password by bypassing token validation, allowing an attacker to gain administrative access.
Nuclei Templates (1)
http.component:"october cms"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N