~ / search / GHSA-ph6g-6v8w-8p6m

GHSA-ph6g-6v8w-8p6m

Missing rate limit for password resets

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-28821

Packages

EcosystemPackageAffectedFixed in
Packagist concrete5/concrete5 < 9.1.0 9.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.

References

External links from the advisory. They lead to third-party sites.