CVE-2021-40103

7.5 highEPSS 1.5%

High (7.5) in concretecms concrete cms. EPSS 1.5% chance of exploitation in the next 30 days.

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19