← All credits

lith004

1 vulnerability record and advisories credit this contributor.

CVE-2026-18424
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports