Lucene search
Veracode Vulnerability DatabaseVERACODE:33082HistoryNov 24, 2021 - 6:32 a.m.
Privilege Escalation
2021-11-2406:32:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
42.8%
concrete5/concrete5 is vulnerable to privilege escalation. The vulnerability exists in ‘bulkupdate.php’ because the ‘view’ permissions granted users in that group can escalate to being an administrator using specially crafted curl.
Related
cnvd
cnvd
PortlandLabs Concrete CMS Elevation of Privilege Vulnerability
2021-11-23 00:00:00
cve
cve
CVE-2021-22966
2021-11-19 19:15:08
github
github
Improper Privilege Management in Concrete CMS
2021-11-23 18:18:07
prion
prion
Privilege escalation
2021-11-19 19:15:00
nvd
nvd
CVE-2021-22966
2021-11-19 19:15:08
osv
osv
Improper Privilege Management in Concrete CMS
2021-11-23 18:18:07
cvelist
cvelist
CVE-2021-22966
2021-11-19 18:09:48
openvas
openvas
Concrete CMS < 8.5.7 Multiple Vulnerabilities
2021-11-22 00:00:00