25Ara
CVE-2023-48652 | Concrete CMS up to 9.2.2 submit cross-site request forgery
A vulnerability has been found in Concrete CMS up to 9.2.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ccm/system/dialogs/logs/delete_all/submit. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2023-48652. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.