PT-2021-15305 · Unknown · Concrete Cms

Adrian_T · Published 2021-11-19 · Updated 2021-11-23 · CVE-2021-22970

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 8.5.6 and below Concrete CMS version 9.0.0

Description The issue allows local IP importing, making the system vulnerable to SSRF attacks on private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network apps. This also involves SSRF Mitigation Bypass through DNS Rebinding.

Recommendations For Concrete CMS versions 8.5.6 and below, update to a version above 8.5.6 to mitigate the risk. For Concrete CMS version 9.0.0, consider disabling local IP importing until a patch is available. As a temporary workaround, restrict access to the local LAN to minimize the risk of exploitation.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2021-22970

GHSA-GQPW-9Q54-9X28

Affected Products

Concrete Cms

References · 7

• https://osv.dev/vulnerability/CVE-2021-22970 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22970 · Security Note
• https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gqpw-9q54-9x28 · Vendor Advisory
• https://documentation.concretecms.org/developers/introduction/version-history/901-release-notes · Vendor Advisory
• https://t.me/cibsecurity/32744 · Telegram Post
• https://hackerone.com/reports/1364797 · Note