concretecms concrete_cms 服务端请求伪造（ssrf）

CVE编号

CVE-2021-22970

利用情况

暂无

补丁情况

N/A

披露时间

2021-11-20

漏洞描述

Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb. SSRF Mitigation Bypass through DNS RebindingConcrete CMS security team gave this a CVSS score of 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:NConcrete CMS is maintaining Concrete version 8.5.x until 1 May 2022 for security fixes.This CVE is shared with HackerOne Reports https://hackerone.com/reports/1364797 and https://hackerone.com/reports/1360016Reporters: Adrian Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) and Bipul Jaiswal

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://documentation.concretecms.org/developers/introduction/version-history...
https://documentation.concretecms.org/developers/introduction/version-history...
https://hackerone.com/reports/1364797

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	concretecms	concrete_cms	*		Up to (including) 8.5.6
	运行在以下环境
	应用	concretecms	concrete_cms	9.0	-

CVSS3评分 7.5

• 攻击路径 网络
• 攻击复杂度 低
• 权限要求 无
• 影响范围 未更改
• 用户交互 无
• 可用性 无
• 保密性 高
• 完整性 无

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-ID 漏洞类型 CWE-918 服务端请求伪造（SSRF）