Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*

1 brief RSS
medium advisory

Concrete CMS IDOR Vulnerability in Conversation Rating Endpoint

Concrete CMS versions prior to 9.5.1 contain an IDOR vulnerability in the get_rating endpoint that allows unauthenticated attackers to enumerate message IDs and disclose rating data for private content.

Concrete Cms idor information-disclosure web-application reconnaissance
1r 1t 1c