En resumen
- CVE-2020-11476 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a concrete5/concrete5, concrete cms (concretecms).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.9%, mayor que el 87.1% de las vulnerabilidades.
- Solución: actualizar a 8.5.3 o posterior.
Description
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
NVD description
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
Más vulnerabilidades de concrete5/concrete5
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free