Non notée
CVE-2022-30117 Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload…
Description
Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. Credit to Siebene for reporting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| https://github.com/concrete5/concrete5 | Versions non publiées |
Références
- hackerone.com hackerone.com
- documentation.concretecms.org documentation.concretecms.org
- documentation.concretecms.org documentation.concretecms.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de https://github.com/concrete5/concrete5
Les 16 CVE de https://github.com/concrete5/concrete5 →
CVE-2022-30118
Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description:…
Non notée
CVE-2022-30120
XSS in /dashboard/blocks/stacks/view_details/ - old browsers only
Non notée
CVE-2022-21829
Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from…
Non notée
CVE-2022-30119
XSS in /dashboard/reports/logs/view - old browsers only
Non notée