CVE-2022-30117

🗓️ 24 Jun 2022 14:59:59Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 103 Views

CVE-2022-30117: Arbitrary File Delete in Concrete CM

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-30117	24 Jun 202215:15	–	attackerkb
Circl	CVE-2022-30117	24 Jun 202218:31	–	circl
CNNVD	PortlandLabs Concrete CMS 路径遍历漏洞	24 Jun 202200:00	–	cnnvd
CNVD	PortlandLabs Concrete CMS Arbitrary File Deletion Vulnerability	28 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-30117	24 Jun 202214:59	–	cvelist
EUVD	EUVD-2022-5907	3 Oct 202520:07	–	euvd
Github Security Blog	Path traversal in Concrete CMS	25 Jun 202200:00	–	github
NVD	CVE-2022-30117	24 Jun 202215:15	–	nvd
OSV	GHSA-3JXH-6635-6JWP Path traversal in Concrete CMS	25 Jun 202200:00	–	osv
Prion	Design/Logic Flaw	24 Jun 202215:15	–	prion

NVD

Vulners

Node

concretecms concrete_cmsRange<8.5.8

concretecms concrete_cmsRange9.0.0–9.1.0

[
  {
    "product": "https://github.com/concrete5/concrete5",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Remediated in Concrete CMS 8.5.8 and 9.1.0.  Affected Versions are Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2"
      }
    ]
  }
]

Source	Link
documentation	www.documentation.concretecms.org/developers/introduction/version-history/858-release-notes
documentation	www.documentation.concretecms.org/developers/introduction/version-history/910-release-notes
hackerone	www.hackerone.com/reports/1482280