GHSA-pj76-75cm-3552CriticalCVSS 9.8
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
🔗 CVE IDs covered (1)
📋 Description
Concrete CMS (previously concrete5) before 9.2 is vulnerable to possible Auth bypass in the jobs section.
🎯 Affected products1
- composer/concrete5/concrete5:< 9.2.0
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2023-28473
- https://concretecms.com
- https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20
- https://github.com/concretecms/concretecms/pull/11749
- https://github.com/concretecms/concretecms/releases/tag/8.5.13
- https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release
- https://github.com/advisories/GHSA-pj76-75cm-3552