25Ara
CVE-2023-48651 | Concrete CMS up to 9.2.2 submit cross-site request forgery
A vulnerability, which was classified as problematic, has been found in Concrete CMS up to 9.2.2. Affected by this issue is some unknown functionality of the file /ccm/system/dialogs/file/delete/1/submit. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2023-48651. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.