← Volver a CVEs
CVE-2023-28473
LOW3.3
Descripcion
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.
Detalles CVE
Puntuacion CVSS v3.13.3
SeveridadLOW
Vector CVSSCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
Vector de ataqueNETWORK
ComplejidadHIGH
Privilegios requeridosHIGH
Interaccion usuarioNONE
Publicado4/28/2023
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
concretecms:concrete_cms
Debilidades (CWE)
CWE-287
Referencias
https://concretecms.com(cve@mitre.org)
https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release(cve@mitre.org)
https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20(cve@mitre.org)
https://concretecms.com(af854a3a-2127-422b-91ae-364da2661108)
https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release(af854a3a-2127-422b-91ae-364da2661108)
https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.