PT-2023-29290 · Unknown · Concrete Cms

Romanhu · Published 2023-10-06 · Updated 2024-08-02 · CVE-2023-44766

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Concrete CMS version 9.2.1

Description A Cross Site Scripting (XSS) issue allows an attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. Note that the vendor disputes this, stating that allowing an admin to place JavaScript there is an intentional customization feature.

Recommendations For Concrete CMS version 9.2.1, consider restricting access to the SEO - Extra from Page Settings to minimize the risk of exploitation, as this feature can be used to execute arbitrary code. Additionally, ensure that only trusted administrators have access to this feature, as the vendor intends it for customization purposes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-44766

GHSA-437P-JFM4-2387

Affected Products

Concrete Cms

References · 9

• 🔥 https://github.com/sromanhu/ConcreteCMS-Stored-XSS---SEO · Exploit
• https://osv.dev/vulnerability/CVE-2023-44766 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-437p-jfm4-2387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44766 · Security Note
• https://github.com/concretecms/concretecms · Note
• https://t.me/cibsecurity/71717 · Telegram Post
• https://concretecms.org/about/project-news/security/security-advisory-2023-10-31-concrete-cms-rejects-cve-2023-44760-and-cve-2023-44766 · Note
• https://twitter.com/CVEnew/status/1710277641675456773 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1710306248489414669 · Twitter Post