Lucene search
PRIOn knowledge basePRION:CVE-2021-22958HistoryOct 07, 2021 - 2:15 p.m.
Server side request forgery (ssrf)
2021-10-0714:15:00
PRIOn knowledge base
www.prio-n.com
1
A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP address to bypass the limitations in place for localhost allowing interaction with local services. Impact can vary depending on services exposed.CVSSv2.0 AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete_cms | lt | 8.5.5 |
Related
hackerone
hackerone
Concrete CMS: SSRF bypass
2020-04-30 13:38:41
cvelist
cvelist
CVE-2021-22958
2021-10-07 13:35:02
osv
osv
Server-Side Request Forgery vulnerability in concrete5
2021-10-12 18:41:59
cnvd
cnvd
Portlandlabs Concrete5 server-side request forgery vulnerability
2021-10-10 00:00:00
github
github
Server-Side Request Forgery vulnerability in concrete5
2021-10-12 18:41:59
veracode
veracode
Server-side Request Forgery (SSRF)
2021-10-08 06:19:52
cve
cve
CVE-2021-22958
2021-10-07 14:15:08
nvd
nvd
CVE-2021-22958
2021-10-07 14:15:08
openvas
openvas
Concrete CMS < 8.5.5 Multiple Vulnerabilities
2021-03-29 00:00:00