CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-48648

Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insecure permissions. File creation functions (such as the Mkdir() function) gives universal access (0777) to created folders by default. Excessive permissions can be granted when creating a directory with permissions greater than 0755 or when the permissions argument is not specified.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.4%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2023-48648

Concretecms » Concrete Cms » Version: N/A

cpe:2.3:a:concretecms:concrete_cms:-
Concretecms » Concrete Cms » Version: 5.4.1.1

cpe:2.3:a:concretecms:concrete_cms:5.4.1.1
Concretecms » Concrete Cms » Version: 5.4.2

cpe:2.3:a:concretecms:concrete_cms:5.4.2
Concretecms » Concrete Cms » Version: 5.4.2.1

cpe:2.3:a:concretecms:concrete_cms:5.4.2.1
Concretecms » Concrete Cms » Version: 5.4.2.2

cpe:2.3:a:concretecms:concrete_cms:5.4.2.2
Concretecms » Concrete Cms » Version: 5.6.1

cpe:2.3:a:concretecms:concrete_cms:5.6.1
Concretecms » Concrete Cms » Version: 5.6.1.1

cpe:2.3:a:concretecms:concrete_cms:5.6.1.1
Concretecms » Concrete Cms » Version: 5.6.1.2

cpe:2.3:a:concretecms:concrete_cms:5.6.1.2
Concretecms » Concrete Cms » Version: 5.6.2

cpe:2.3:a:concretecms:concrete_cms:5.6.2
Concretecms » Concrete Cms » Version: 5.6.2.1

cpe:2.3:a:concretecms:concrete_cms:5.6.2.1
Concretecms » Concrete Cms » Version: 5.6.3

cpe:2.3:a:concretecms:concrete_cms:5.6.3
Concretecms » Concrete Cms » Version: 5.6.3.1

cpe:2.3:a:concretecms:concrete_cms:5.6.3.1
Concretecms » Concrete Cms » Version: 5.6.3.3

cpe:2.3:a:concretecms:concrete_cms:5.6.3.3
Concretecms » Concrete Cms » Version: 5.6.3.4

cpe:2.3:a:concretecms:concrete_cms:5.6.3.4
Concretecms » Concrete Cms » Version: 5.6.3.5

cpe:2.3:a:concretecms:concrete_cms:5.6.3.5
Concretecms » Concrete Cms » Version: 5.6.4.0

cpe:2.3:a:concretecms:concrete_cms:5.6.4.0
Concretecms » Concrete Cms » Version: 5.7.0

cpe:2.3:a:concretecms:concrete_cms:5.7.0
Concretecms » Concrete Cms » Version: 5.7.0.1

cpe:2.3:a:concretecms:concrete_cms:5.7.0.1
Concretecms » Concrete Cms » Version: 5.7.0.3

cpe:2.3:a:concretecms:concrete_cms:5.7.0.3
Concretecms » Concrete Cms » Version: 5.7.0.4

cpe:2.3:a:concretecms:concrete_cms:5.7.0.4
Concretecms » Concrete Cms » Version: 5.7.1

cpe:2.3:a:concretecms:concrete_cms:5.7.1
Concretecms » Concrete Cms » Version: 5.7.2

cpe:2.3:a:concretecms:concrete_cms:5.7.2
Concretecms » Concrete Cms » Version: 5.7.2.1

cpe:2.3:a:concretecms:concrete_cms:5.7.2.1
Concretecms » Concrete Cms » Version: 5.7.3

cpe:2.3:a:concretecms:concrete_cms:5.7.3
Concretecms » Concrete Cms » Version: 5.7.3.1

cpe:2.3:a:concretecms:concrete_cms:5.7.3.1
Concretecms » Concrete Cms » Version: 5.7.4

cpe:2.3:a:concretecms:concrete_cms:5.7.4
Concretecms » Concrete Cms » Version: 5.7.4.1

cpe:2.3:a:concretecms:concrete_cms:5.7.4.1
Concretecms » Concrete Cms » Version: 5.7.4.2

cpe:2.3:a:concretecms:concrete_cms:5.7.4.2
Concretecms » Concrete Cms » Version: 5.7.5

cpe:2.3:a:concretecms:concrete_cms:5.7.5
Concretecms » Concrete Cms » Version: 5.7.5.1

cpe:2.3:a:concretecms:concrete_cms:5.7.5.1
Concretecms » Concrete Cms » Version: 5.7.5.10

cpe:2.3:a:concretecms:concrete_cms:5.7.5.10
Concretecms » Concrete Cms » Version: 5.7.5.11

cpe:2.3:a:concretecms:concrete_cms:5.7.5.11
Concretecms » Concrete Cms » Version: 5.7.5.12

cpe:2.3:a:concretecms:concrete_cms:5.7.5.12
Concretecms » Concrete Cms » Version: 5.7.5.13

cpe:2.3:a:concretecms:concrete_cms:5.7.5.13
Concretecms » Concrete Cms » Version: 5.7.5.2

cpe:2.3:a:concretecms:concrete_cms:5.7.5.2
Concretecms » Concrete Cms » Version: 5.7.5.3

cpe:2.3:a:concretecms:concrete_cms:5.7.5.3
Concretecms » Concrete Cms » Version: 5.7.5.4

cpe:2.3:a:concretecms:concrete_cms:5.7.5.4
Concretecms » Concrete Cms » Version: 5.7.5.5

cpe:2.3:a:concretecms:concrete_cms:5.7.5.5
Concretecms » Concrete Cms » Version: 5.7.5.6

cpe:2.3:a:concretecms:concrete_cms:5.7.5.6
Concretecms » Concrete Cms » Version: 5.7.5.7

cpe:2.3:a:concretecms:concrete_cms:5.7.5.7
Concretecms » Concrete Cms » Version: 5.7.5.8

cpe:2.3:a:concretecms:concrete_cms:5.7.5.8
Concretecms » Concrete Cms » Version: 5.7.5.9

cpe:2.3:a:concretecms:concrete_cms:5.7.5.9
Concretecms » Concrete Cms » Version: 5.8.1.0

cpe:2.3:a:concretecms:concrete_cms:5.8.1.0
Concretecms » Concrete Cms » Version: 5.8.2.0

cpe:2.3:a:concretecms:concrete_cms:5.8.2.0
Concretecms » Concrete Cms » Version: 8.0

cpe:2.3:a:concretecms:concrete_cms:8.0
Concretecms » Concrete Cms » Version: 8.0.1

cpe:2.3:a:concretecms:concrete_cms:8.0.1
Concretecms » Concrete Cms » Version: 8.0.2

cpe:2.3:a:concretecms:concrete_cms:8.0.2
Concretecms » Concrete Cms » Version: 8.0.3

cpe:2.3:a:concretecms:concrete_cms:8.0.3
Concretecms » Concrete Cms » Version: 8.1.0

cpe:2.3:a:concretecms:concrete_cms:8.1.0
Concretecms » Concrete Cms » Version: 8.2.0

cpe:2.3:a:concretecms:concrete_cms:8.2.0
Concretecms » Concrete Cms » Version: 8.2.1

cpe:2.3:a:concretecms:concrete_cms:8.2.1
Concretecms » Concrete Cms » Version: 8.3.0

cpe:2.3:a:concretecms:concrete_cms:8.3.0
Concretecms » Concrete Cms » Version: 8.3.1

cpe:2.3:a:concretecms:concrete_cms:8.3.1
Concretecms » Concrete Cms » Version: 8.3.2

cpe:2.3:a:concretecms:concrete_cms:8.3.2
Concretecms » Concrete Cms » Version: 8.4.0

cpe:2.3:a:concretecms:concrete_cms:8.4.0
Concretecms » Concrete Cms » Version: 8.4.1

cpe:2.3:a:concretecms:concrete_cms:8.4.1
Concretecms » Concrete Cms » Version: 8.4.2

cpe:2.3:a:concretecms:concrete_cms:8.4.2
Concretecms » Concrete Cms » Version: 8.4.3

cpe:2.3:a:concretecms:concrete_cms:8.4.3
Concretecms » Concrete Cms » Version: 8.4.4

cpe:2.3:a:concretecms:concrete_cms:8.4.4
Concretecms » Concrete Cms » Version: 8.4.5

cpe:2.3:a:concretecms:concrete_cms:8.4.5
Concretecms » Concrete Cms » Version: 8.5.0

cpe:2.3:a:concretecms:concrete_cms:8.5.0
Concretecms » Concrete Cms » Version: 8.5.1

cpe:2.3:a:concretecms:concrete_cms:8.5.1
Concretecms » Concrete Cms » Version: 8.5.10

cpe:2.3:a:concretecms:concrete_cms:8.5.10
Concretecms » Concrete Cms » Version: 8.5.11

cpe:2.3:a:concretecms:concrete_cms:8.5.11
Concretecms » Concrete Cms » Version: 8.5.12

cpe:2.3:a:concretecms:concrete_cms:8.5.12
Concretecms » Concrete Cms » Version: 8.5.2

cpe:2.3:a:concretecms:concrete_cms:8.5.2
Concretecms » Concrete Cms » Version: 8.5.3

cpe:2.3:a:concretecms:concrete_cms:8.5.3
Concretecms » Concrete Cms » Version: 8.5.4

cpe:2.3:a:concretecms:concrete_cms:8.5.4
Concretecms » Concrete Cms » Version: 8.5.5

cpe:2.3:a:concretecms:concrete_cms:8.5.5
Concretecms » Concrete Cms » Version: 8.5.6

cpe:2.3:a:concretecms:concrete_cms:8.5.6
Concretecms » Concrete Cms » Version: 8.5.7

cpe:2.3:a:concretecms:concrete_cms:8.5.7
Concretecms » Concrete Cms » Version: 8.5.8

cpe:2.3:a:concretecms:concrete_cms:8.5.8
Concretecms » Concrete Cms » Version: 8.5.9

cpe:2.3:a:concretecms:concrete_cms:8.5.9
Concretecms » Concrete Cms » Version: 9.0

cpe:2.3:a:concretecms:concrete_cms:9.0
Concretecms » Concrete Cms » Version: 9.0.0

cpe:2.3:a:concretecms:concrete_cms:9.0.0
Concretecms » Concrete Cms » Version: 9.0.1

cpe:2.3:a:concretecms:concrete_cms:9.0.1
Concretecms » Concrete Cms » Version: 9.0.2

cpe:2.3:a:concretecms:concrete_cms:9.0.2
Concretecms » Concrete Cms » Version: 9.1.0

cpe:2.3:a:concretecms:concrete_cms:9.1.0
Concretecms » Concrete Cms » Version: 9.1.1

cpe:2.3:a:concretecms:concrete_cms:9.1.1
Concretecms » Concrete Cms » Version: 9.1.2

cpe:2.3:a:concretecms:concrete_cms:9.1.2
Concretecms » Concrete Cms » Version: 9.1.3

cpe:2.3:a:concretecms:concrete_cms:9.1.3
Concretecms » Concrete Cms » Version: 9.2.1

cpe:2.3:a:concretecms:concrete_cms:9.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-48648

Products

Pricing

Contact Us