CVE-2021-22954
Assigner: hackerone
Published: 2022-02-09T22:05:55
State: PUBLISHED
affected: product: https://github.com/concrete5/concrete5
vendor: n/a
versions: status: affected
version: fixed in Concrete CMS v 9.0
descriptions: value: A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.
problemTypes: descriptions: cweId: CWE-352
description: Cross-Site Request Forgery (CSRF) (CWE-352)
type: CWE