Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

References

• advisory github.com
• advisory nvd.nist.gov
• advisory concretecms.org
• web documentation.concretecms.org
• web documentation.concretecms.org
• web github.com
• web github.com