GHSA-gqpw-9q54-9x28

ghsaUSosv

Server-Side Request Forgery in Concrete CMS

view advisory published 2021-11-23Licence: CC-BY-4.0

Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable to SSRF attacks on the private LAN to servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-22970US	high7.5	1.49% (74th)	—	2021-11-19
Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN serve…

references

External citations — patches, advisories, analysis.

https://documentation.concretecms.org/developers/introduction/version-history/857-release-notesWEB
https://documentation.concretecms.org/developers/introduction/version-history/901-release-notesWEB
https://hackerone.com/reports/1364797WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-22970ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan