CyberRota Analysis
AI-GeneratedConcrete CMS versions prior to 9.5.3 are vulnerable due to a flaw in the conversation attachment upload endpoint, which allows files to be imported into the file manager without proper permission checks. This could enable users without the necessary permissions, including unauthenticated visitors in guest-posting configurations, to upload approved file types, potentially leading to unauthorized access or content manipulation. Organizations using affected versions should prioritize this vulnerability to mitigate risks associated with unauthorized file uploads.
Original NVD Description
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-posting configuration, could import approved files of allowed types into the file manager. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 2.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N. Thanks riodrwn for reporting.