Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/22 12:31 a.m.8 views

GHSA-VPGR-CWFX-PWFW Concrete CMS is vulnerable to unauthenticated page metadata disclosure

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across every page with a configured summary template, revealing the existence of private, draft, and restricted pages while leaking title, path, description, and author information...

6.3CVSS5.9AI score0.00195EPSS
SaveExploits0References3
Rows per page
Query Builder