Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS
Moderate severity
GitHub Reviewed
Published
Nov 15, 2022
to the GitHub Advisory Database
•
Updated Aug 17, 2023
Package
Affected versions
< 8.5.10
>= 9.0.0, < 9.1.3
Patched versions
8.5.10
9.1.3
Description
Published by the National Vulnerability Database
Nov 14, 2022
Published to the GitHub Advisory Database
Nov 15, 2022
Reviewed
Nov 22, 2022
Last updated
Aug 17, 2023
In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2, the authTypeConcreteCookieMap table can be filled up causing a denial of service (high load).
References