PortlandLabs Concrete Cms 路径遍历漏洞

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. A path traversal vulnerability exists in PortlandLabs Concrete CMS because the product does not securely handle user input data. The vulnerability can be exploited to cause arbitrary file...

CVE-2021-22949

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team"...