cvelist/2018/1999xxx/CVE-2018-1999009.json

{     "CVE_data_meta": {         "ASSIGNER": "kurt@seifried.org",         "DATE_ASSIGNED": "2018-07-20T20:44:32.973711",         "DATE_REQUESTED": "2018-07-11T09:29:47",         "ID": "CVE-2018-1999009",         "REQUESTER": "andres@clarifiedsecurity.com"     },     "affects": {         "vendor": {             "vendor_data": [                 {                     "product": {                         "product_data": [                             {                                 "product_name": "October CMS",                                 "version": {                                     "version_data": [                                         {                                             "version_value": "prior to Build 437"                                         }                                     ]                                 }                             }                         ]                     },                     "vendor_name": "October CMS"                 }             ]         }     },     "data_format": "MITRE",     "data_type": "CVE",     "data_version": "4.0",     "description": {         "description_data": [             {                 "lang": "eng",                 "value": "October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears  to have been fixed in Build 437."             }         ]     },     "problemtype": {         "problemtype_data": [             {                 "description": [                     {                         "lang": "eng",                         "value": "Local File Inclusion"                     }                 ]             }         ]     },     "references": {         "reference_data": [             {                 "url": "http://octobercms.com/support/article/rn-10"             }         ]     } }