CVE-2023-44763: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

October 10, 2023

Concrete CMS v9.2.1 is affected by Arbitrary File Upload vulnerability via the Thumbnail" file upload, which allows Cross-Site Scripting (XSS).

References

github.com/advisories/GHSA-wrp2-6v6j-hfmg
github.com/sromanhu/ConcreteCMS-Arbitrary-file-upload-Thumbnail
nvd.nist.gov/vuln/detail/CVE-2023-44763

Detect and mitigate CVE-2023-44763 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →