| Package | Affected versions | Patched versions |
|---|---|---|
| concrete cms | ≤ 8.5.5 |
An issue was discovered in Concrete CMS through 8.5.5. Arbitrary File deletion can occur via PHAR deserialization in is_dir (PHP Object Injection associated with the __wakeup magic method).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free