| Package | Affected versions | Patched versions |
|---|---|---|
| concrete cms | = 8.2.0 |
A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free