Lucene search
GoogleOSV:GHSA-M2V2-8227-59F5HistoryNov 23, 2021 - 5:54 p.m.
Exposure of sensitive information in concrete5/core
2021-11-2317:54:39
Google
osv.dev
10
0.002 Low
EPSS
Percentile
52.9%
In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If Allowed to Add Message to a Conversation.To remediate this, a check was added to verify a user has permissions to view files before attaching the files to a message in "add / edit message”.
Related
veracode
veracode
Information Disclosure
2021-11-25 06:48:33
cnvd
cnvd
PortlandLabs Concrete CMS has an unspecified vulnerability (CNVD-2021-94040)
2021-11-23 00:00:00
github
github
Exposure of sensitive information in concrete5/core
2021-11-23 17:54:39
cve
cve
CVE-2021-22967
2021-11-19 19:15:08
prion
prion
Design/Logic Flaw
2021-11-19 19:15:00
cvelist
cvelist
CVE-2021-22967
2021-11-19 18:11:07
nvd
nvd
CVE-2021-22967
2021-11-19 19:15:08
openvas
openvas
Concrete CMS < 8.5.7 Multiple Vulnerabilities
2021-11-22 00:00:00