CVE-2021-22968
Quick assessment
Affected
n/a https://github.com/concrete5/concrete5
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PortlandLabs Concrete CMS是美国PortlandLabs公司的一个面向团队的开源内容管理系统。 PortlandLabs Concrete CMS 存在代码问题漏洞，该漏洞源于在Concrete CMS(以前的concrete5)文件管理器中添加远程文件会导致在Concrete CMS (concrete5) 8.5.6及以下版本中执行远程代码。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-22968
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concrete5) versions 8.5.6 and below.The external file upload feature stages files in the public directory even if they have disallowed file extensions. They are stored in a directory with a random name, but it's possible to stall the uploads and brute force the directory name. You have to be an admin with the ability to upload files, but this bug gives you the ability to upload restricted file types and execute them depending on server configuration.To fix this, a check for allowed file extensions was added before downloading files to a tmp directory.Concrete CMS Security Team gave this a CVSS v3.1 score of 5.4 AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:NThis fix is also in Concrete version 9.0.0
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)
Source: CVE Program / CVE List V5
Vulnerability Title
PortlandLabs Concrete CMS 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PortlandLabs Concrete CMS是美国PortlandLabs公司的一个面向团队的开源内容管理系统。 PortlandLabs Concrete CMS 存在代码问题漏洞，该漏洞源于在Concrete CMS(以前的concrete5)文件管理器中添加远程文件会导致在Concrete CMS (concrete5) 8.5.6及以下版本中执行远程代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | https://github.com/concrete5/concrete5 | Concrete CMS version 9.0 and version 8.5.7 | - |
|
II. Public POCs for CVE-2021-22968
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-22968
请登录查看更多情报信息。
Other References for CVE-2021-22968 (2)
-
https://hackerone.com/reports/1350444 x_refsource_MISC
Same Patch Batch · n/a · 2021-11-19 · 35 CVEs total
| CVE-2021-23433 | 5.9 MEDIUM | Prototype Pollution |
| CVE-2021-37592 | Suricata 缓冲区错误漏洞 | |
| CVE-2021-29323 | Moddable SDK 缓冲区错误漏洞 | |
| CVE-2021-29324 | Moddable SDK 缓冲区错误漏洞 | |
| CVE-2021-22028 | Greenplum Database 路径遍历漏洞 | |
| CVE-2021-3962 | ImageMagick 资源管理错误漏洞 | |
| CVE-2021-22030 | Greenplum Database 日志信息泄露漏洞 | |
| CVE-2021-22053 | VMware Spring Cloud Netflix 代码注入漏洞 | |
| CVE-2021-33850 | WordPress 跨站脚本漏洞 | |
| CVE-2021-29325 | Moddable SDK 缓冲区错误漏洞 | |
| CVE-2021-41435 | ASUS routers 安全漏洞 | |
| CVE-2021-41436 | ASUS routers 环境问题漏洞 | |
| CVE-2021-44033 | Ionic Identity Vault 安全漏洞 | |
| CVE-2021-44025 | Roundcube Webmail 跨站脚本漏洞 | |
| CVE-2021-44026 | Roundcube Webmail SQL注入漏洞 | |
| CVE-2021-21898 | LibreCAD 缓冲区错误漏洞 | |
| CVE-2021-21899 | LibreCAD 缓冲区错误漏洞 | |
| CVE-2021-21900 | LibreCAD 资源管理错误漏洞 | |
| CVE-2021-29326 | Moddable SDK 缓冲区错误漏洞 | |
| CVE-2021-29327 | Moddable SDK 缓冲区错误漏洞 |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-103531
OpenSC card-setcos.c setcos_construct_fci_44 stack-based ove -
CVE-2026-103227
GPAC DASH Client dash_client.c gf_dash_resolve_url buffer ov -
CVE-2026-103118
GraphicsMagick WPG File wpg.c ExtractPostscript recursion -
CVE-2026-51870
DeepTutor v1.4.0 命令执行漏洞 -
CVE-2026-51858
camel-ai 0.2.91a3 shell_exec命令执行漏洞
Same weakness: CWE-98
-
CVE-2026-96837
WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution -
CVE-2026-89294
Simply Schedule Appointments <= 1.6.12.27 - Authenticated (S -
CVE-2026-39353
InvoicePlane: Remote Code Execution via Writable Templates D -
CVE-2026-13456
WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File In -
CVE-2026-12227
Visual Composer Website Builder <= 45.16.0 - Unauthenticated
V. Comments for CVE-2021-22968
No comments yet