Lucene search
PRIOn knowledge basePRION:CVE-2017-8082HistoryApr 24, 2017 - 6:59 a.m.
Design/Logic Flaw
2017-04-2406:59:00
PRIOn knowledge base
www.prio-n.com
1
concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin into viewing a malicious page involving the /tools/required/files/importers/imageeditor?fID=1&imgData= URI. This results in a site-wide denial of service making the site not accessible to any users or any administrators.
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete_cms | eq | 8.1.0 |
Related
cve
cve
CVE-2017-8082
2017-04-24 06:59:00
nvd
nvd
CVE-2017-8082
2017-04-24 06:59:00
packetstorm
packetstorm
concrete5 8.1.0 Thumbnail Editor CSRF / DoS
2017-05-02 00:00:00
zdt
zdt
concrete5 8.1.0 Thumbnail Editor CSRF Vulnerability
2017-05-03 00:00:00
cvelist
cvelist
CVE-2017-8082
2017-04-24 06:12:00
osv
osv
CVE-2017-8082
2017-04-24 06:59:00
openvas
openvas
Concrete5 Header Injection and CSRF Vulnerability
2017-04-19 00:00:00