Unrestricted Uploads in Concrete5

🗓️ 10 Feb 2022 22:41:28Reported by GitHub Advisory DatabaseType

Unrestricted Sort Direction in Concrete5 before 8.5.

Reporter	Title	Published	Views	Family All 7
Prion	Design/Logic Flaw	22 Jun 202000:15	–	prion
OSV	Unrestricted Uploads in Concrete5	10 Feb 202222:28	–	osv
OSV	CVE-2020-14961	22 Jun 202000:15	–	osv
NVD	CVE-2020-14961	22 Jun 202000:15	–	nvd
CVE	CVE-2020-14961	22 Jun 202000:15	–	cve
Cvelist	CVE-2020-14961	21 Jun 202023:04	–	cvelist
OpenVAS	Concrete5 < 8.5.3 Multiple Vulnerabilities	25 Jun 202000:00	–	openvas

Vulners

Node

concrete5 concrete5Range<8.5.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14961
github	www.github.com/concrete5/concrete5/pull/8651
github	www.github.com/concrete5/concrete5/releases/tag/8.5.3
github	www.github.com/advisories/GHSA-g4gm-pxh3-29fq

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Feb 2022 22:28Current

2Low risk

Vulners AI Score2

CVSS25

CVSS35.3

EPSS0.001

CWE-434