Description
Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team"
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | https://github.com/concrete5/concrete5 | Fixed version 8.5.6 | — |