Back to search
CVE-2021-22949
Published: Sep 23, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team"
| Vendor | Product | Versions |
|---|---|---|
n/a | https://github.com/concrete5/concrete5 | affected Fixed in version 8.5.6 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now