Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2020-14961

Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.

Published: Jun 22, 2020
Updated: May 9, 2024
CVE: CVE-2020-14961
GHSA: GHSA-g4gm-pxh3-29fq
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

CWE-434

Affected Software
References

Software	From	Fixed in
concretecms / concrete_cms	-	8.5.3
concrete5 / concrete5	-	8.5.3