Lucene search
K

CVE-2025-3153 Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 - CSRF and XSS in Concrete CMS Custom Address attribute

šŸ—“ļøĀ 03 Apr 2025Ā 00:17:14Reported byĀ ConcreteCMSTypeĀ 
cvelist
Ā cvelist
šŸ”—Ā www.cve.orgšŸ‘Ā 15Ā Views

Vulnerability in Concrete CMS allows CSRF and XSS attacks on address attribute in certain versions.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-3153
3 Apr 202503:06
–circl
CNNVD
Concrete CMS å®‰å…Øę¼ę“ž
3 Apr 202500:00
–cnnvd
CVE
CVE-2025-3153
3 Apr 202500:17
–cve
EUVD
EUVD-2025-9568
3 Oct 202520:07
–euvd
Github Security Blog
Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)
3 Apr 202504:41
–github
NVD
CVE-2025-3153
3 Apr 202502:15
–nvd
OSV
GHSA-CMM4-P9V2-Q453 Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)
3 Apr 202504:41
–osv
Positive Technologies
PT-2025-14567 Ā· Unknown Ā· Concrete Cms
3 Apr 202500:00
–ptsecurity
RedhatCVE
CVE-2025-3153
5 Apr 202500:23
–redhatcve
Snyk
Cross-site Request Forgery (CSRF)
3 Apr 202500:49
–snyk
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "product": "Concrete CMS",
    "repo": "https://github.com/concretecms/concretecms",
    "vendor": "Concrete CMS",
    "versions": [
      {
        "lessThanOrEqual": "9.3.4RC1",
        "status": "affected",
        "version": "9",
        "versionType": "git"
      },
      {
        "lessThan": "8.5.20",
        "status": "affected",
        "version": "5",
        "versionType": "git"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation