CVE-2023-28473: Critical severity ConcreteCMS Concrete Cms vulnerability
Published Apr 28, 2023
·Updated
Concrete CMS (previously concrete5) before 9.2 is vulnerable to possible Auth bypass in the jobs section.
Other sources
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.
Affected Software
2 affected componentsFixes available
composer/concrete5/concrete5<9.2.0
9.2.0
ConcreteCMS Concrete Cms<9.2.0
Event History
Apr 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
03:30 PM
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-28473.
2
What is the severity of CVE-2023-28473?
The severity of CVE-2023-28473 is critical.
3
How does CVE-2023-28473 affect Concrete CMS?
CVE-2023-28473 affects Concrete CMS versions prior to 9.2, potentially allowing for authentication bypass in the jobs section.
4
How can CVE-2023-28473 be fixed?
To fix CVE-2023-28473, users should update Concrete CMS to version 9.2.0 or later.
5
Where can I find more information about CVE-2023-28473?
More information about CVE-2023-28473 can be found at the following links: [link1], [link2], [link3].