Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1tY3hyLWZ4NWYtOTZxcc0Xjw

Server-Side Request Forgery in Concrete CMS

Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.

Permalink: https://github.com/advisories/GHSA-mcxr-fx5f-96qq
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tY3hyLWZ4NWYtOTZxcc0Xjw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 3 years ago
Updated: almost 2 years ago

Identifiers: GHSA-mcxr-fx5f-96qq, CVE-2021-22969
References:

• https://nvd.nist.gov/vuln/detail/CVE-2021-22969
• https://hackerone.com/reports/1369312
• https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes
• https://github.com/advisories/GHSA-mcxr-fx5f-96qq

Blast Radius: 0.0

Affected Packages