CVE-2022-21829
First published: Fri Jun 24 2022(Updated: )
Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concrete_secure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http. Concrete CMS security team ranked this 8 with CVSS v3.1 vector: AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Credit goes to Anna for reporting HackerOne 1482520.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Concretecms Concrete Cms | <8.5.8 | |
| Concretecms Concrete Cms | >=9.0.0<9.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes
- https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes,
- https://hackerone.com/reports/1482520,
- https://hackerone.com/reports/1482520%2C
- https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes%2C
Frequently Asked Questions
What is CVE-2022-21829?
CVE-2022-21829 is a vulnerability in Concrete CMS versions 9.0.0 through 9.0.2 and 8.5.7 and below that allows downloading zip files over HTTP and executing code from those zip files, potentially leading to remote code execution (RCE).
How severe is CVE-2022-21829?
CVE-2022-21829 has a severity rating of 9.8 (Critical).
How can I fix CVE-2022-21829?
To fix CVE-2022-21829, update Concrete CMS to version 8.5.8 or above for versions 8.x and to version 9.1.0 or above for versions 9.x. Additionally, ensure that requests are made over HTTPS and not HTTP.
Are there any reference links for CVE-2022-21829?
Yes, you can find reference links for CVE-2022-21829 at the following locations: [1] https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes [2] https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes [3] https://hackerone.com/reports/1482520
What is the CWE ID for CVE-2022-21829?
The CWE ID for CVE-2022-21829 is 319.
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/concretecms
- canonical/concretecms concrete cms
- version/concretecms concrete cms/9.0.0