pkg:Packagist/concrete5/core

All known vulnerabilities

• CRITICAL9.1CVE-2022-30117Path traversal in Concrete CMS
  >= 9.0.0, < 9.1.0
• HIGH8.8CVE-2021-22966Improper Privilege Management in Concrete CMS
  from 0, < 8.5.7
• HIGH8.0CVE-2022-21829Code injection in concrete CMS
  >= 9.0.0, < 9.1.0
• HIGH7.2Improper file handling in concrete5/core
  from 0, < 8.5.7
• LOW3.1Cross site scripting in Concrete CMS
  >= 9.0.0, < 9.1.0
• —Server-Side Request Forgery in Concrete CMS
  from 0, < 8.5.7
• —Server-Side Request Forgery in Concrete CMS
  from 0, < 8.5.7
• —Password exposure in concrete5/core
  from 0, < 8.5.7
• —Exposure of sensitive information in concrete5/core
  from 0, < 8.5.7