Non évaluée

An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on the ccm/calendar/dialogs/event...

CVE-2021-40108 Première détection SecPulse Sep 27, 2021

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on the ccm/calendar/dialogs/event/add/save endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory documentation.concretecms.org
report hackerone.com

Faits clés

Gravité: Non évaluée
Publication: Sep 27, 2021
Première détection SecPulse: Sep 27, 2021

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54