GitHub Advisoryadvisory · Packagist

GHSA-mcxr-fx5f-96qq Server-Side Request Forgery in Concrete CMS

MEDIUM Published 2021-11-23 Modified 2021-11-22 Official page ↗
Aliases
CVE-2021-22969
Ecosystem
Packagist
Packages
concrete5/core
Severity
Moderate
Weaknesses
CWE-918
Reviewed
2021-11-22

Affected packages

• Packagist concrete5/core: < 8.5.7 → fixed in 8.5.7

Description

Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.

Related

Alias · CVE (1)

  • CVE-2021-22969 Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References