CVE-2021-22949CWE-352

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit…

published September 23, 2021

CVSS
—
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team"

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-09-23T12:40Z
EPSS history
Timeline
  • 23 SEP 12:40Z
    A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit…
    cvelistv5