Lucene search
HackeroneCVELIST:CVE-2021-22954HistoryFeb 09, 2022 - 10:05 p.m.
CVE-2021-22954
2022-02-0922:05:55
CWE-352
hackerone
www.cve.org
A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.
CNA Affected
[
{
"product": "https://github.com/concrete5/concrete5",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "fixed in Concrete CMS v 9.0"
}
]
}
]Related
cve
cve
CVE-2021-22954
2022-02-09 23:15:14
osv
osv
Cross Site Request Forgery in concrete5/concrete5
2022-02-11 00:00:58
prion
prion
Cross site request forgery (csrf)
2022-02-09 23:15:00
nvd
nvd
CVE-2021-22954
2022-02-09 23:15:14
github
github
Cross Site Request Forgery in concrete5/concrete5
2022-02-11 00:00:58