← All advisories

Low severity3.3NVD Advisory· Published Apr 28, 2023· Updated Jun 17, 2026

CVE-2023-28473

CVE-2023-28473

Description

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
concrete5/concrete5Packagist	< 9.2.0	9.2.0

Affected products

2

Concrete CMS/Concrete CMSdescription
ghsa-coords
pkg:composer/concrete5/concrete5
Range: < 9.2.0

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-pj76-75cm-3552ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-28473ghsaADVISORY
www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20nvdVendor AdvisoryWEB
concretecms.comnvdProductWEB
github.com/concretecms/concretecms/pull/11749ghsaWEB
github.com/concretecms/concretecms/releases/tag/8.5.13ghsaWEB
www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-releasenvdWEB

News mentions

0

No linked articles in our index yet.