Non notée
CVE-2021-22966 Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below
Description
Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. If a group is granted "view" permissions on the bulkupdate page, then users in that group can escalate to being an administrator with a specially crafted curl. Fixed by adding a check for group permissions before allowing a group to be moved. Concrete CMS Security team CVSS scoring: 7.1 AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HCredit for discovery: "Adrian Tiron from FORTBRIDGE ( https://www.fortbridge.co.uk/ )"This fix is also in Concrete version 9.0.0
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| https://github.com/concrete5/concrete5 | Versions non publiées |
Références
- documentation.concretecms.org documentation.concretecms.org
- hackerone.com hackerone.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de https://github.com/concrete5/concrete5
Les 16 CVE de https://github.com/concrete5/concrete5 →
CVE-2022-30118
Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description:…
Non notée
CVE-2022-30120
XSS in /dashboard/blocks/stacks/view_details/ - old browsers only
Non notée
CVE-2022-21829
Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from…
Non notée
CVE-2022-30119
XSS in /dashboard/reports/logs/view - old browsers only
Non notée