GHSA-mcxr-fx5f-96qqMedium

Server-Side Request Forgery in Concrete CMS

Published
November 23, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-22969 →

📋 Description

Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.

🎯 Affected products1

  • composer/concrete5/core:< 8.5.7

🔗 References (4)