Non notée
CVE-2021-22954 A cross-site request forgery vulnerability exists in Concrete…
Description
A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| https://github.com/concrete5/concrete5 | Versions non publiées |
Références
- documentation.concretecms.org documentation.concretecms.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de https://github.com/concrete5/concrete5
Les 16 CVE de https://github.com/concrete5/concrete5 →
CVE-2022-30118
Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description:…
Non notée
CVE-2022-30120
XSS in /dashboard/blocks/stacks/view_details/ - old browsers only
Non notée
CVE-2022-21829
Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from…
Non notée
CVE-2022-30119
XSS in /dashboard/reports/logs/view - old browsers only
Non notée