CVE-2021-40099

HIGH CVSS: 7.2 Published: 2021-09-24 Modified: 2026-06-17

Description

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution.

Affected Platforms

Concretecms Concrete Cms

Weakness Type

NVD-CWE-noinfo

References