Skip to content

Commit 479c858

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-45fj-fvmm-xcc5 GHSA-6mxw-2vhf-42g5 GHSA-mm5f-5rqw-574f
1 parent 9900ec8 commit 479c858

3 files changed

Lines changed: 93 additions & 18 deletions

File tree

advisories/unreviewed/2026/03/GHSA-45fj-fvmm-xcc5/GHSA-45fj-fvmm-xcc5.json renamed to advisories/github-reviewed/2026/03/GHSA-45fj-fvmm-xcc5/GHSA-45fj-fvmm-xcc5.json

Lines changed: 31 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,40 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-45fj-fvmm-xcc5",
4-
"modified": "2026-03-04T03:31:34Z",
4+
"modified": "2026-03-04T21:36:26Z",
55
"published": "2026-03-04T03:31:34Z",
66
"aliases": [
77
"CVE-2026-3240"
88
],
9-
"details": "In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via the Question field. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Thanks minhnn42, namdi and quanlna2 from VCSLab-Viettel Cyber Security for reporting.",
9+
"summary": "Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability",
10+
"details": "In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via the Question field. \n\nThe Concrete CMS security team thanks minhnn42, namdi and quanlna2 from VCSLab-Viettel Cyber Security for reporting.",
1011
"severity": [
1112
{
1213
"type": "CVSS_V4",
13-
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
15+
}
16+
],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "Packagist",
21+
"name": "concrete5/concrete5"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "9.4.8"
32+
}
33+
]
34+
}
35+
]
1436
}
1537
],
16-
"affected": [],
1738
"references": [
1839
{
1940
"type": "ADVISORY",
@@ -26,15 +47,19 @@
2647
{
2748
"type": "WEB",
2849
"url": "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes"
50+
},
51+
{
52+
"type": "PACKAGE",
53+
"url": "https://github.com/concretecms/concretecms"
2954
}
3055
],
3156
"database_specific": {
3257
"cwe_ids": [
3358
"CWE-79"
3459
],
3560
"severity": "MODERATE",
36-
"github_reviewed": false,
37-
"github_reviewed_at": null,
61+
"github_reviewed": true,
62+
"github_reviewed_at": "2026-03-04T21:36:26Z",
3863
"nvd_published_at": "2026-03-04T03:16:04Z"
3964
}
4065
}

advisories/unreviewed/2026/03/GHSA-6mxw-2vhf-42g5/GHSA-6mxw-2vhf-42g5.json renamed to advisories/github-reviewed/2026/03/GHSA-6mxw-2vhf-42g5/GHSA-6mxw-2vhf-42g5.json

Lines changed: 31 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,40 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-6mxw-2vhf-42g5",
4-
"modified": "2026-03-04T03:31:34Z",
4+
"modified": "2026-03-04T21:34:58Z",
55
"published": "2026-03-04T03:31:34Z",
66
"aliases": [
77
"CVE-2026-2994"
88
],
9-
"details": "Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads to a security bypass since changes are saved prior to checking the CSRF token. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks z3rco for reporting",
9+
"summary": "Concrete CMS vulnerable to Cross-Site Request Forgery (CSRF)",
10+
"details": "Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads to a security bypass since changes are saved prior to checking the CSRF token. \n\nThe Concrete CMS security team thanks z3rco for reporting",
1011
"severity": [
1112
{
1213
"type": "CVSS_V4",
13-
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
15+
}
16+
],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "Packagist",
21+
"name": "concrete5/concrete5"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "9.4.8"
32+
}
33+
]
34+
}
35+
]
1436
}
1537
],
16-
"affected": [],
1738
"references": [
1839
{
1940
"type": "ADVISORY",
@@ -26,15 +47,19 @@
2647
{
2748
"type": "WEB",
2849
"url": "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes"
50+
},
51+
{
52+
"type": "PACKAGE",
53+
"url": "https://github.com/concretecms/concretecms"
2954
}
3055
],
3156
"database_specific": {
3257
"cwe_ids": [
3358
"CWE-352"
3459
],
3560
"severity": "LOW",
36-
"github_reviewed": false,
37-
"github_reviewed_at": null,
61+
"github_reviewed": true,
62+
"github_reviewed_at": "2026-03-04T21:34:58Z",
3863
"nvd_published_at": "2026-03-04T03:16:04Z"
3964
}
4065
}

advisories/unreviewed/2026/03/GHSA-mm5f-5rqw-574f/GHSA-mm5f-5rqw-574f.json renamed to advisories/github-reviewed/2026/03/GHSA-mm5f-5rqw-574f/GHSA-mm5f-5rqw-574f.json

Lines changed: 31 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,40 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-mm5f-5rqw-574f",
4-
"modified": "2026-03-04T03:31:34Z",
4+
"modified": "2026-03-04T21:34:11Z",
55
"published": "2026-03-04T03:31:34Z",
66
"aliases": [
77
"CVE-2026-3244"
88
],
9-
"details": "In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML encoding in search results. This allows authenticated, rogue administrators to inject malicious JavaScript through page names that executes when users search for and view those pages in search results. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks zolpak for reporting",
9+
"summary": "Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability",
10+
"details": "In Concrete CMS below version 9.4.8, A stored Cross-site Scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML encoding in search results. This allows authenticated, rogue administrators to inject malicious JavaScript through page names that executes when users search for and view those pages in search results. \n\nThe Concrete CMS security team thanks zolpak for reporting.",
1011
"severity": [
1112
{
1213
"type": "CVSS_V4",
13-
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
15+
}
16+
],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "Packagist",
21+
"name": "concrete5/concrete5"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "9.4.8"
32+
}
33+
]
34+
}
35+
]
1436
}
1537
],
16-
"affected": [],
1738
"references": [
1839
{
1940
"type": "ADVISORY",
@@ -26,15 +47,19 @@
2647
{
2748
"type": "WEB",
2849
"url": "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes"
50+
},
51+
{
52+
"type": "PACKAGE",
53+
"url": "https://github.com/concretecms/concretecms"
2954
}
3055
],
3156
"database_specific": {
3257
"cwe_ids": [
3358
"CWE-79"
3459
],
3560
"severity": "MODERATE",
36-
"github_reviewed": false,
37-
"github_reviewed_at": null,
61+
"github_reviewed": true,
62+
"github_reviewed_at": "2026-03-04T21:34:11Z",
3863
"nvd_published_at": "2026-03-04T02:15:54Z"
3964
}
4065
}

0 commit comments

Comments
 (0)