Concrete CMS Cross Site Request Forgery (CSRF)

🗓️ 25 Dec 2023 09:21:30Reported by GitHub Advisory DatabaseType

Concrete CMS 9 before 9.2.3 CSRF vulnerabilit

Reporter	Title	Published	Views	Family All 7
Veracode	Cross Site Request Forgery	28 Dec 202314:51	–	veracode
OSV	CVE-2023-48652	25 Dec 202308:15	–	osv
OSV	Concrete CMS Cross Site Request Forgery (CSRF)	25 Dec 202309:30	–	osv
NVD	CVE-2023-48652	25 Dec 202308:15	–	nvd
Cvelist	CVE-2023-48652	25 Dec 202300:00	–	cvelist
Prion	Cross site request forgery (csrf)	25 Dec 202308:15	–	prion
CVE	CVE-2023-48652	25 Dec 202308:15	–	cve

Vulners

Node

concrete5 concrete5Range<9.2.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-48652
documentation	www.documentation.concretecms.org/developers/introduction/version-history/923-release-notes
concretecms	www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates
github	www.github.com/advisories/GHSA-qp42-5pj7-4ccm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Dec 2023 09:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS34.3

EPSS0.001

CWE-352