Medium · 4.3 CVE-2023-48651 EUVD-2024-0501GHSA-45m2-8q7f-93wv

Concrete CMS Cross Site Request Forgery (CSRF) vulnerability

Published Dec 25, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) at /ccm/system/dialogs/file/delete/1/submit.

Ecosystem	Package	Affected	Fixed	Record
Packagist	concrete5/concrete5	>= 9.0.0, < 9.2.3	9.2.3	GHSA-45m2-8q7f-93wv