Lucene search
China National Vulnerability DatabaseCNVD-2021-76080HistorySep 29, 2021 - 12:00 a.m.
PortlandLabs Concrete CMS Cross-site Request Forgery Vulnerability (CNVD-2021-76080)
2021-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.001 Low
EPSS
Percentile
31.1%
PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. A cross-site request forgery vulnerability exists in PortlandLabs Concrete CMS, which stems from the product’s log dialog box adding a save endpoint without validating the CCM token. An attacker could send an unintended request to the server through this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| portlandlabs concrete cms | le | 8.5.5 |
Related
cve
cve
CVE-2021-40108
2021-09-27 13:15:08
cvelist
cvelist
CVE-2021-40108
2021-09-27 12:01:34
hackerone
hackerone
Concrete CMS: Stored unauth XSS in calendar event via CSRF
2021-02-12 08:43:11
prion
prion
Cross site request forgery (csrf)
2021-09-27 13:15:00
nvd
nvd
CVE-2021-40108
2021-09-27 13:15:08
openvas
openvas
Concrete CMS < 8.5.6 Multiple Vulnerabilities
2021-10-05 00:00:00