Lucene search
China National Vulnerability DatabaseCNVD-2021-99286HistorySep 26, 2021 - 12:00 a.m.
Concrete CMS arbitrary file deletion vulnerability
2021-09-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
0.003 Low
EPSS
Percentile
68.1%
Concrete CMS is an open source content management system for teams.Concrete CMS 8.5.5 and earlier versions are vulnerable to arbitrary file deletion. An attacker could exploit the vulnerability to delete arbitrary files via PHAR deserialization in is_dir.
| CPE | Name | Operator | Version |
|---|---|---|---|
| portland labs concrete cms | le | 8.5.5 |
Related
prion
prion
Arbitrary file deletion
2021-09-24 15:15:00
cvelist
cvelist
CVE-2021-40102
2021-09-24 14:55:42
hackerone
hackerone
Concrete CMS: Arbitrary File delete via PHAR deserialization
2020-07-11 22:02:19
nvd
nvd
CVE-2021-40102
2021-09-24 15:15:08
cve
cve
CVE-2021-40102
2021-09-24 15:15:08
openvas
openvas
Concrete CMS < 8.5.6 Multiple Vulnerabilities
2021-10-05 00:00:00