~ / search / GHSA-hf9p-9r39-r2h3

GHSA-hf9p-9r39-r2h3

Unrestricted Uploads in Concrete5

Source: GitHub Advisory Database (reviewed) High CVE-2020-11476

Packages

EcosystemPackageAffectedFixed in
Packagist concrete5/concrete5 < 8.5.3 8.5.3

Details

As written in the advisory (Markdown source, shown as plain text).

Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.

References

External links from the advisory. They lead to third-party sites.