GHSA-mcxr-fx5f-96qq
Server-Side Request Forgery in Concrete CMS
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | concrete5/core | < 8.5.7 | 8.5.7 |
Details
As written in the advisory (Markdown source, shown as plain text).
Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.
References
External links from the advisory. They lead to third-party sites.