gitlab/packagist/october/october/CVE-2017-1000194
Unrestricted Upload of File with Dangerous Type
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.