Remote code execution

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution...

CVE-2021-40099

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution...

CVE-2021-40099: Undefined Security Weakness

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution...

PT-2021-22808

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 8.5.6 Description An issue in Concrete CMS allows remote code execution when fetching the update json scheme over HTTP. Recommendations For Concrete CMS versions prior to 8.5.6, update to version 8.5.6 or later t...