GHSA-mcxr-fx5f-96qq

ghsaUSosv

Server-Side Request Forgery in Concrete CMS

view advisory published 2021-11-23Licence: CC-BY-4.0

Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-22969US	medium5.3	0.86% (58th)	—	2021-11-19
Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To…

references

External citations — patches, advisories, analysis.

https://documentation.concretecms.org/developers/introduction/version-history/857-release-notesWEB
https://hackerone.com/reports/1369312WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-22969ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan