Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure.

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Références

• advisory github.com
• advisory nvd.nist.gov
• advisory concretecms.org
• web documentation.concretecms.org
• web documentation.concretecms.org
• web github.com
• web github.com