Lucene search
+L

1 matches found

OSV
OSV
added 2021/11/23 6:18 p.m.69 views

GHSA-RHF5-F553-XG82 Password exposure in concrete5/core

Unauthorized individuals could view password protected files using viewinline in Concrete CMS previously concrete 5 prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in viewinline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations...

7.5CVSS7.6AI score0.01075EPSS
SaveExploits0References3
Rows per page
Query Builder