Vulnerabilities

CVE-2021-22954 | BDVDB-2026-169489 Detail

https://github.com/concrete5/concrete5

Description#

A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://documentation.concretecms.org/developers/introduction/version-history/90-release-notes

Exploit#

No public exploit known

History#

Version 12022-02-09Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.