CVE-2022-43693

Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for users of Concrete who use the "out of the box" core OAuth.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes	Release Notes Vendor Advisory
https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes	Release Notes Vendor Advisory
https://github.com/concretecms/concretecms/releases/8.5.10	Patch Release Notes Third Party Advisory
https://github.com/concretecms/concretecms/releases/9.1.3	Patch Release Notes Third Party Advisory
https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:concretecms:concrete_cms::::::::
	cpe:2.3:a:concretecms:concrete_cms::::::::

History

No history.

Information

Published : 2022-11-14 17:15

Updated : 2022-11-17 21:55

NVD link : CVE-2022-43693

Mitre link : CVE-2022-43693

CVE.ORG link : CVE-2022-43693

JSON object : View

Products Affected

concretecms

concrete_cms

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2022-43693", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-11-14T17:15:10.433", "references": [{"url": "https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/concretecms/concretecms/releases/8.5.10", "tags": ["Patch", "Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/concretecms/concretecms/releases/9.1.3", "tags": ["Patch", "Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Concrete CMS is vulnerable to CSRF due to the lack of \"State\" parameter for external Concrete authentication service for users of Concrete who use the \"out of the box\" core OAuth."}, {"lang": "es", "value": "Concrete CMS es vulnerable a Cross-Site Request Forgery (CSRF) debido a la falta del par\u00e1metro \"State\" para el servicio de autenticaci\u00f3n externo de Concrete para usuarios de Concrete que utilizan el n\u00facleo OAuth \"out of the box\"."}], "lastModified": "2022-11-17T21:55:38.363", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CB5F09B-26E8-43F3-85FE-5CEEA6EED9D8", "versionEndExcluding": "8.5.10"}, {"criteria": "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A5E1A3A-03FB-4B91-8AF1-FE4B458263C3", "versionEndIncluding": "9.1.2", "versionStartIncluding": "9.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}