GHSA-MCXR-FX5F-96QQ中危已审查

Server-Side Request Forgery in Concrete CMS

OSV 1.4.0 · github-reviewed · 修改于 2021-11-23 02:30

发布时间

2021-11-24 02:18

GitHub 审查时间

2021-11-23 02:30

NVD 发布时间

2021-11-20 03:15

源文件

advisories/github-reviewed/2021/11/GHSA-mcxr-fx5f-96qq/GHSA-mcxr-fx5f-96qq.json

公告说明

Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.

受影响的软件包

Packagist

concrete5/core

ECOSYSTEM

引入0修复8.5.7

标识信息

别名 / CVE

CVE-2021-22969

CWE

CWE-918

软件生态

Packagist

扩展资料

暂无扩展资料。

CVSS 评分

没有 CVSS 数据。

原始 OSV JSON

{
  "id": "GHSA-mcxr-fx5f-96qq",
  "aliases": [
    "CVE-2021-22969"
  ],
  "details": "Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.",
  "summary": "Server-Side Request Forgery in Concrete CMS",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.5.7"
            }
          ]
        }
      ],
      "package": {
        "name": "concrete5/core",
        "ecosystem": "Packagist"
      }
    }
  ],
  "modified": "2021-11-22T18:30:27Z",
  "severity": [],
  "published": "2021-11-23T18:18:35Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22969",
      "type": "ADVISORY"
    },
    {
      "url": "https://hackerone.com/reports/1369312",
      "type": "WEB"
    },
    {
      "url": "https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-918"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": "2021-11-19T19:15:00Z",
    "github_reviewed_at": "2021-11-22T18:30:27Z"
  }
}