CVE-2024-3180
Assigner: ConcreteCMS
Published: 2024-04-03T19:00:02.642Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Concrete CMS
repo: https://github.com/concretecms/concretecms
vendor: Concrete CMS
versions: lessThan: 9.2.8
status: affected
version: 9.0.0
versionType: git
lessThan: 8.5.16
status: affected
version: 5.0.0
versionType: git
credits: type: finder
value: Alexey Solovyev
datePublic: 2024-04-03T18:53:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file.&nbsp;Prior to fix, stored XSS could be caused by a rogue administrator adding malicious code to the link-text field when creating a block of type file.&nbsp;<span style="background-color: rgb(255, 255, 255);">The Concrete CMS security team gave this vulnerability a CVSS v3.1 score of 3.1 with a vector of</span> <a target="_blank" rel="nofollow" href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L&amp;version=3.1"><span style="background-color: rgb(255, 255, 255);">AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L</span></a><span style="background-color: transparent;">.&nbsp;</span><span style="background-color: transparent;"><span style="background-color: rgb(255, 255, 255);">Thanks </span></span><span style="background-color: transparent;"><span style="background-color: rgb(255, 255, 255);">Alexey Solovyev for reporting.</span></span><br><br>
value: Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file. Prior to fix, stored XSS could be caused by a rogue administrator adding malicious code to the link-text field when creating a block of type file. The Concrete CMS security team gave this vulnerability a CVSS v3.1 score of 3.1 with a vector of  AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator . Thanks Alexey Solovyev for reporting.


impacts: capecId: CAPEC-592
descriptions: value: CAPEC-592 Stored XSS
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: advisory: https://hackerone.com/reports/903356
discovery: EXTERNAL
title: Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file
x_generator: engine: Vulnogram 0.1.0-dev