← All advisories

Moderate severityNVD Advisory· Published Jun 21, 2020· Updated Aug 4, 2024

CVE-2020-14961

CVE-2020-14961

Description

Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
concrete5/concrete5Packagist	< 8.5.3	8.5.3

Affected products

2

Concrete5/Concrete5description
ghsa-coords
pkg:composer/concrete5/concrete5
Range: < 8.5.3

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-g4gm-pxh3-29fqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-14961ghsaADVISORY
github.com/concrete5/concrete5/pull/8651ghsax_refsource_MISCWEB
github.com/concrete5/concrete5/releases/tag/8.5.3ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.