PT-2012-5829 · Concrete5 · Concrete5

Yuji Tounai · Published 2012-12-21 · Updated 2022-05-17 · CVE-2012-5181

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions concrete5 Japanese versions 5.5.1 through 5.5.2.1 concrete5 English versions 5.5.0 through 5.6.0.2

Description The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For concrete5 Japanese versions 5.5.1 through 5.5.2.1, update to a version outside of this range to resolve the issue. For concrete5 English versions 5.5.0 through 5.6.0.2, update to a version outside of this range to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-5181

GHSA-X4X9-4C65-73W8

Affected Products

Concrete5

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-5181 · Security Note
• http://concrete5-japan.org/news/concrete5602ja-release · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x4x9-4c65-73w8 · Vendor Advisory
• https://github.com/concretecms/concrete5-legacy · Note
• http://jvn.jp/en/jp/JVN65458431/index.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5181 · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000113 · Note