Concrete CMS 9.0

CPE Details

Concrete CMS 9.0
concretecms
concrete_cms
9.0
2021-11-22
17h13 +00:00
2021-11-22
17h51 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:concretecms:concrete_cms:9.0:*:*:*:*:*:*:*

Informations

Vendor

concretecms

Product

concrete_cms

Version

9.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-8661 2024-09-16 17h37 +00:00 Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block. A rogue administrator could add a malicious payload by executing it in the browsers of targeted users. The Concrete CMS Security Team gave this vulnerability a CVSS v4 score of 4.6 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N  Since the "Next&Previous Nav" block output was not sufficiently sanitized, the malicious payload could be executed in the browsers of targeted users. Thanks, Chu Quoc Khanh for reporting.
4.6
Moyen
CVE-2023-48652 2023-12-24 23h00 +00:00 Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via /ccm/system/dialogs/logs/delete_all/submit. An attacker can force an admin user to delete server report logs on a web application to which they are currently authenticated.
4.3
Moyen
CVE-2023-48648 2023-11-16 23h00 +00:00 Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insecure permissions. File creation functions (such as the Mkdir() function) gives universal access (0777) to created folders by default. Excessive permissions can be granted when creating a directory with permissions greater than 0755 or when the permissions argument is not specified.
9.8
Critique
CVE-2023-48649 2023-11-16 23h00 +00:00 Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name.
5.4
Moyen
CVE-2023-28471 2023-04-28 00h00 +00:00 Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name.
5.4
Moyen
CVE-2023-28820 2023-04-28 00h00 +00:00 Concrete CMS (previously concrete5) before 9.1 is vulnerable to stored XSS in RSS Displayer via the href attribute because the link element input was not sanitized.
5.4
Moyen
CVE-2023-28821 2023-04-28 00h00 +00:00 Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.
5.3
Moyen
CVE-2023-28472 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only attributes set for ccmPoll cookies.
5.3
Moyen
CVE-2023-28473 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.
3.3
Bas
CVE-2023-28474 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search.
5.4
Moyen
CVE-2023-28475 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
6.1
Moyen
CVE-2023-28476 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files.
5.4
Moyen
CVE-2023-28477 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API Integrations via the name parameter.
5.5
Moyen
CVE-2023-28819 2023-04-27 22h00 +00:00 Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names.
5.4
Moyen
CVE-2021-22970 2021-11-19 17h08 +00:00 Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb. SSRF Mitigation Bypass through DNS RebindingConcrete CMS security team gave this a CVSS score of 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:NConcrete CMS is maintaining Concrete version 8.5.x until 1 May 2022 for security fixes.This CVE is shared with HackerOne Reports https://hackerone.com/reports/1364797 and https://hackerone.com/reports/1360016Reporters: Adrian Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) and Bipul Jaiswal
7.5
Haute