high7.2
CVE-2021-40099
An issue was discovered in Concrete CMS through 8.5.5.
Impact
An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Concretecms | Concrete Cms | through 8.5.5 |