~ / search / GHSA-45m2-8q7f-93wv

GHSA-45m2-8q7f-93wv

Concrete CMS Cross Site Request Forgery (CSRF) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-48651

Packages

EcosystemPackageAffectedFixed in
Packagist concrete5/concrete5 >= 9.0.0, < 9.2.3 9.2.3

Details

As written in the advisory (Markdown source, shown as plain text).

Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) at /ccm/system/dialogs/file/delete/1/submit.

References

External links from the advisory. They lead to third-party sites.