未評価
Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery:...
CVE-2021-22950
SecPulse初出
参照URL
- advisory documentation.concretecms.org
- report hackerone.com