CVE-2021-22953

2021-09-2312:42:12

CWE-352

hackerone

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: “Solar Security Research Team”

CNA Affected

[
  {
    "product": "https://github.com/concrete5/concrete5",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "fixed in Concrete CMS version 8.5.6"
      }
    ]
  }
]