Access Control Bypass

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Access Control Bypass via the summary template process. An attacker can obtain sensitive metadata, including title, path, description, and author information of private, draft, and...