Posted by Egidio Romano on Jun 28

————————————————————————–
Concrete5 <= 5.7.3.1 Multiple Cross-Site Request Forgeries Vulnerabilities
————————————————————————–

[-] Software Link:

https://www.concrete5.org/

[-] Affected Versions:

Version 5.7.3.1 and probably other versions.

[-] Vulnerabilities Description:

Concrete5 implements a Synchronizer Token Pattern in order to provide…