Authorization Bypass Through User-Controlled Key

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the exEntryID parameter in the Express Entry Detail block. An attacker can gain unauthorized access to all Express form submissions...