Skip to content
Threat Feed
Subscribe

Vendor

Concretecms

1 brief RSS
medium advisory

Concrete CMS IDOR Vulnerability in Conversation Rating Endpoint

Concrete CMS versions prior to 9.5.1 contain an IDOR vulnerability in the get_rating endpoint that allows unauthenticated attackers to enumerate message IDs and disclose rating data for private content.

Concrete Cms idor information-disclosure web-application reconnaissance
1r 1t 1c