Firetruck

CVE-2021-32648

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
octoberoctobercms / october>= 1.0.471, < 1.0.472affected
octoberoctobercms / october>= 1.1.1, < 1.1.5affected