CVSS 3.1
3.3 lowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:LCVE-2023-28473
Low (3.3) in concretecms concrete cms. EPSS 0.8% chance of exploitation in the next 30 days.
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- concretecms:concrete_cms
References
- https://concretecms.com
- https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release
- https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20
- https://concretecms.com
- https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release