Description
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | concrete5/concrete5 | < 8.5.3 | 8.5.3 | GHSA-hf9p-9r39-r2h3 |
High · 7.2
CVE-2020-11476
EUVD-2021-2356GHSA-hf9p-9r39-r2h3
Unrestricted Uploads in Concrete5
Published Jul 28, 2020 · Updated Aug 4, 2024 · Assigned by mitre