| Package | Affected versions | Patched versions |
|---|---|---|
| concrete5/concrete5 | < 8.5.3 | 8.5.3 |
| concrete cms | < 8.5.3 | 8.5.3 |
Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free