Lucene search
China National Vulnerability DatabaseCNVD-2021-94049HistoryOct 10, 2021 - 12:00 a.m.
Portlandlabs Concrete5 server-side request forgery vulnerability
2021-10-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
0.002 Low
EPSS
Percentile
58.7%
Portlandlabs Concrete5 is an open source content management system (CMS) from PortlandLabs, U.S. Portlandlabs Concrete5 server-side request forgery vulnerability can be exploited by attackers to retrieve HTTP and FTP files from internal server networks by inserting internal addresses.
| CPE | Name | Operator | Version |
|---|---|---|---|
| PortlandLabs Concrete5 | lt | 8.5.5 |
Related
hackerone
hackerone
Concrete CMS: SSRF bypass
2020-04-30 13:38:41
cvelist
cvelist
CVE-2021-22958
2021-10-07 13:35:02
osv
osv
Server-Side Request Forgery vulnerability in concrete5
2021-10-12 18:41:59
veracode
veracode
Server-side Request Forgery (SSRF)
2021-10-08 06:19:52
cve
cve
CVE-2021-22958
2021-10-07 14:15:08
prion
prion
Server side request forgery (ssrf)
2021-10-07 14:15:00
github
github
Server-Side Request Forgery vulnerability in concrete5
2021-10-12 18:41:59
nvd
nvd
CVE-2021-22958
2021-10-07 14:15:08
openvas
openvas
Concrete CMS < 8.5.5 Multiple Vulnerabilities
2021-03-29 00:00:00