Concrete CMS: SSRF thru File Replace
Hello Team, Version: 8.2.0 Details: I have found a possibility of Server Side Request Forgery via file 'Replace' functionality. An attacker / malicious user is able to scan local network and able to enumerate open TCP ports. The root of cause of this vulnerability: - you are allowing to use...