Lucene search

CVE-2022-43691

🗓️ 14 Nov 2022 23:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 56 Views

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 discloses server-side sensitive information

Reporter	Title	Published	Views	Family All 7
OSV	Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information	15 Nov 202212:00	–	osv
OSV	CVE-2022-43691	14 Nov 202223:15	–	osv
Github Security Blog	Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information	15 Nov 202212:00	–	github
Veracode	Information Disclosure	16 Nov 202202:24	–	veracode
NVD	CVE-2022-43691	14 Nov 202223:15	–	nvd
Cvelist	CVE-2022-43691	14 Nov 202200:00	–	cvelist
Prion	Information disclosure	14 Nov 202223:15	–	prion

Nvd

Node

concretecms concrete_cmsRange<8.5.10

concretecms concrete_cmsRange9.0.0–9.1.2

Source	Link
concretecms	www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31
documentation	www.documentation.concretecms.org/developers/introduction/version-history/8510-release-notes
github	www.github.com/concretecms/concretecms/releases/9.1.3
documentation	www.documentation.concretecms.org/developers/introduction/version-history/913-release-notes
github	www.github.com/concretecms/concretecms/releases/8.5.10

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Nov 2022 23:15Current

5.1Medium risk

Vulners AI Score5.1

CVSS35.3

EPSS0.00176

CWE-319