Known vulnerabilities in concrete5 - page 2

Software: concrete5
Software CPE: cpe:2.3:a:portlandlabs:concrete5:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting concrete5 concrete5 is affected by 54 known vulnerabilities: 1 high, 10 medium, 43 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75406 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28471
CWE-79 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU75405 - Improper Authentication
CVE-2023-28473
CWE-287 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU75404 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28472
CWE-200 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU75403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28474
CWE-79 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU68888 - Exposure of sensitive information to an unauthorized actor
CVE-2022-43689
CWE-200 Medium
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68885 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43688
CWE-79 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68884 - Exposure of sensitive information to an unauthorized actor
CVE-2022-43690
CWE-200 Medium
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43695
CWE-79 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68882 - Session Fixation
CVE-2022-43687
CWE-384 Medium
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68881 - Exposure of sensitive information to an unauthorized actor
CVE-2022-43691
CWE-200 Medium
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68880 - Improper input validation
CVE-2022-43686
CWE-20 Medium
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68879 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43968
CWE-79 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43967
CWE-79 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43694
CWE-79 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43692
CWE-79 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU68874 - Cross-Site Request Forgery (CSRF)
CVE-2022-43693
CWE-352 Low
No
No
8.5.10, 9.1.3 01.11.2022 SB2022110120
#VU64531 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30118
CWE-79 Low
No
No
8.5.8 21.06.2022 SB2022062104
#VU64529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30119
CWE-79 Low
No
No
8.5.8 21.06.2022 SB2022062104
#VU64528 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30120
CWE-79 Low
No
No
8.5.8 21.06.2022 SB2022062104
#VU64526 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-30117
CWE-22 Low
No
No
8.5.8 21.06.2022 SB2022062104


Showing elements 21 - 40 out of 54