Security Advisory

CVE-2021-22950

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-23 12:40:52
Last updated 2024-08-03 18:58:26
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team"