All products

concrete5/core

Composer · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Password exposure in concrete5/coreCVE-2021-22951 · GHSA-RHF5-F553-XG82 concrete5/core Composer Medium Fix reported
Server-Side Request Forgery in Concrete CMSCVE-2021-22970 · GHSA-GQPW-9Q54-9X28 concrete5/core Composer Medium Fix reported
Exposure of sensitive information in concrete5/coreCVE-2021-22967 · GHSA-M2V2-8227-59F5 concrete5/core Composer Medium Fix reported
Server-Side Request Forgery in Concrete CMSCVE-2021-22969 · GHSA-MCXR-FX5F-96QQ concrete5/core Composer Medium Fix reported
Improper file handling in concrete5/coreCVE-2021-22968 · GHSA-G3P2-HFQR-9M25 concrete5/core Composer High Fix reported
Cross site scripting in Concrete CMSCVE-2022-30120 · GHSA-M2WW-6WV6-VW3C concrete5/core Composer Low Fix reported
Path traversal in Concrete CMSCVE-2022-30117 · GHSA-3JXH-6635-6JWP concrete5/core Composer Critical Fix reported
Code injection in concrete CMSCVE-2022-21829 · GHSA-6XC4-7FMM-65Q2 concrete5/core Composer High Fix reported
Improper Privilege Management in Concrete CMS CVE-2021-22966 · GHSA-J4MV-2RV7-V2J9 concrete5/core Composer High Fix reported