CVE-2023-28473
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Summary
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Original description
The description as published by the source.
Concrete CMS (previously concrete5) before 9.2 is vulnerable to possible Auth bypass in the jobs section.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web concretecms.com
- web github.com
- web concretecms.org
- web concretecms.org