CVE-2023-28473
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Résumé
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Concrete CMS (previously concrete5) before 9.2 is vulnerable to possible Auth bypass in the jobs section.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web concretecms.com
- web github.com
- web concretecms.org
- web concretecms.org