CVE-2023-48652

creationtimestamp| type| source ---|---|--- 2023-12-25 09:31:23+00:00| seen| https://t.me/ctinow/159174...

CVE-2023-48652

CVE-2023-48652 affects Concrete CMS versions 9.0.0 through 9.2.2. The issue is a CSRF vulnerability in the endpoint /ccm/system/dialogs/logs/delete_all/submit, where an attacker can trick an authenticated admin into deleting server report logs. The root cause is improper anti-CSRF token handling ...