CVE-2021-40098

CRITICAL CVSS: 9.8 Published: 2021-09-27 Modified: 2026-06-17

Description

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression.

Affected Platforms

Concretecms Concrete Cms

Weakness Type

CWE-22

References