CVE-2021-22951

Unauthorized individuals could view password protected files using viewinline in Concrete CMS previously concrete 5 prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in viewinline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations...

CVE-2021-22951

Unauthorized individuals could view password protected files using viewinline in Concrete CMS previously concrete 5 prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in viewinline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations...

PT-2021-15294

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 8.5.7 Concrete CMS version 8.5.6 Description Unauthorized individuals could view password protected files using view inline in Concrete CMS. The issue has been resolved by checking if a file has a password in vie...