Cross Site Request Forgery in concrete5/concrete5

2022-02-1100:00:58

Google

osv.dev

0.001 Low

EPSS

Percentile

32.5%

JSON

A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.

CPENameOperatorVersion
concrete5/concrete5eq8.3.1
concrete5/concrete5eq8.2.0RC2
concrete5/concrete5eq8.0.3
concrete5/concrete5eq8.5.4
concrete5/concrete5eq8.2.0
concrete5/concrete5eq8.0.1
concrete5/concrete5eq8.4.0RC3
concrete5/concrete5eq8.3.0
concrete5/concrete5eq8.5.5
concrete5/concrete5eq8.5.6

Name	Operator	Version
concrete5/concrete5	eq	8.3.1
concrete5/concrete5	eq	8.2.0RC2
concrete5/concrete5	eq	8.0.3
concrete5/concrete5	eq	8.5.4
concrete5/concrete5	eq	8.2.0
concrete5/concrete5	eq	8.0.1
concrete5/concrete5	eq	8.4.0RC3
concrete5/concrete5	eq	8.3.0
concrete5/concrete5	eq	8.5.5
concrete5/concrete5	eq	8.5.6