Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Concrete CMS (previously concrete5) before 9.2 is vulnerable to possible Auth bypass in the jobs section.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-28473US | low3.3 | — | ||
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://concretecms.comWEB
- https://github.com/concretecms/concretecmsPACKAGE
- https://github.com/concretecms/concretecms/pull/11749WEB
- https://github.com/concretecms/concretecms/releases/tag/8.5.13WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-28473ADVISORY
- https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-releaseWEB
- https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan