Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28473 EUVD-2023-1367GHSA-pj76-75cm-3552

Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section

Published Apr 28, 2023 · Updated Nov 27, 2024 · Assigned by mitre

Package: concrete5/concrete5 Ecosystem: Packagist

Description

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist concrete5/concrete5 < 9.2.0 9.2.0 GHSA-pj76-75cm-3552

References