Unrated

An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on the ccm/calendar/dialogs/event...

CVE-2021-40108 First seen on SecPulse Sep 27, 2021

Original description The description as published by the source.

An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on the ccm/calendar/dialogs/event/add/save endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory documentation.concretecms.org
report hackerone.com

Key facts

Severity: Unrated
Published: Sep 27, 2021
First seen on SecPulse: Sep 27, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54