2 matches found
CVE-2021-40099
An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution...
7.2CVSS8.1AI score
SaveExploits0References2
CVE-2021-40099
Concrete CMS up to version 8.5.5 is affected by a vulnerability in the update JSON scheme fetched over HTTP, which can lead to remote code execution. The OpenVAS entry flags “Concrete CMS
7.2CVSS7.5AI score0.02077EPSS
SaveExploits0References2Affected Software1
20