Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 did not use strict comparison for the legacy_salt so that limited authentication bypass could occur if using this functionality. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PortlandLabs Concrete CMS 安全漏洞
Vulnerability Description
PortlandLabs Concrete CMS是美国PortlandLabs公司的一个面向团队的开源内容管理系统。 Concrete CMS(concrete5) 8.5.10之前版本和9.0.0至9.1.2版本存在安全漏洞，该漏洞源于没有对legacy_salt使用严格的比较，如果使用此功能可能会发生有限的身份验证绕过。
CVSS Information
N/A
Vulnerability Type
N/A