~ / search / GHSA-gr23-g276-xc73

GHSA-gr23-g276-xc73

Cross Site Request Forgery in concrete5/concrete5

Source: GitHub Advisory Database (reviewed) High CVE-2021-22954

Packages

EcosystemPackageAffectedFixed in
Packagist concrete5/concrete5 < 9.0.0 9.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.

References

External links from the advisory. They lead to third-party sites.