Description
An issue was discovered in Concrete CMS through 8.5.5. Arbitrary File deletion can occur via PHAR deserialization in is_dir (PHP Object Injection associated with the __wakeup magic method).
Unscored
CVE-2021-40102
EUVD-2021-27291GHSA-jgcw-5vw9-7w3c
An issue was discovered in Concrete CMS through 8.5.5. Arbitrary File deletion can occur via PHAR deserialization in is_dir (PHP Object Inj…
Published Sep 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre