CVE-2017-1000194
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.
Date published : 2017-11-16
https://github.com/octobercms/october/compare/v1.0.412…v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224
