CVE-2021-22970

Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb. SSRF Mitigation Bypass through DNS RebindingConcrete CMS security team gave this a CVSS score of 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:NConcrete CMS is maintaining Concrete version 8.5.x until 1 May 2022 for security fixes.This CVE is shared with HackerOne Reports https://hackerone.com/reports/1364797 and https://hackerone.com/reports/1360016Reporters: Adrian Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) and Bipul Jaiswal

• CWE-918
• CWE-918

• https://documentation.concretecms.org/developers/introduction/version-history/857-release-notesRelease Notes, Vendor Advisory
• https://documentation.concretecms.org/developers/introduction/version-history/901-release-notesRelease Notes, Vendor Advisory
• https://hackerone.com/reports/1364797Permissions Required
• https://documentation.concretecms.org/developers/introduction/version-history/857-release-notesRelease Notes, Vendor Advisory
• https://documentation.concretecms.org/developers/introduction/version-history/901-release-notesRelease Notes, Vendor Advisory
• https://hackerone.com/reports/1364797Permissions Required

Published

Nov 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22965A vulnerability in Pulse Connect Secure before 9.1R12.1 coul…7.5
• CVE-2021-22966Privilege escalation from Editor to Admin using Groups in Co…8.8
• CVE-2021-22967In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allo…7.5
• CVE-2021-22968A bypass of adding remote files in Concrete CMS (previously …7.2
• CVE-2021-22969Concrete CMS (formerly concrete5) versions below 8.5.7 has a…5.3
• CVE-2021-2297Vulnerability in the Oracle VM VirtualBox product of Oracle …5.3
• CVE-2021-22973On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1…7.5
• CVE-2021-22974On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1…7.5
• CVE-2021-22975On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1…7.5
• CVE-2021-22976On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.…7.5
• CVE-2021-22977On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, coopera…7.5
• CVE-2021-22978On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1…8.3