Lucene search

GoogleOSV:GHSA-474F-MCJV-PGRM

HistoryApr 28, 2023 - 3:30 p.m.

Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names

2023-04-2815:30:19

Google

osv.dev

concrete cms

stored xss

vulnerability

uploaded files

folder names

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

42.3%

JSON

Concrete CMS (previously concrete5) before 9.1 is vulnerable to Stored XSS in uploaded file and folder names.

CPENameOperatorVersion
concrete5/concrete5eq8.5.0
concrete5/concrete5eq8.5.6
concrete5/concrete5eq8.5.6RC1
concrete5/concrete5eq8.2.0RC2
concrete5/concrete5eq8.2.1
concrete5/concrete5eq8.4.1
concrete5/concrete5eq8.5.13
concrete5/concrete5eq9.0.0RC1
concrete5/concrete5eq8.4.0RC3
concrete5/concrete5eq8.5.15

Name	Operator	Version
concrete5/concrete5	eq	8.5.0
concrete5/concrete5	eq	8.5.6
concrete5/concrete5	eq	8.5.6RC1
concrete5/concrete5	eq	8.2.0RC2
concrete5/concrete5	eq	8.2.1
concrete5/concrete5	eq	8.4.1
concrete5/concrete5	eq	8.5.13
concrete5/concrete5	eq	9.0.0RC1
concrete5/concrete5	eq	8.4.0RC3
concrete5/concrete5	eq	8.5.15

Rows per page:

1-10 of 451

References

github.com/concretecms/concretecms/pull/11749

github.com/concretecms/concretecms/releases

github.com/concretecms/concretecms/releases/tag/8.5.13

nvd.nist.gov/vuln/detail/CVE-2023-28819

www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release

www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20