PortlandLabs Concrete CMS Path Traversal Vulnerability (CNVD-2021-76081)

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. A path traversal vulnerability exists in PortlandLabs Concrete CMS, which stems from the product’s failure to securely handle user input data. An attacker could cause arbitrary file reading and SSRF through this vulnerability.