{ "schema_version": "1.4.0", "id": "GHSA-c56g-v92h-6fcq", "modified": "2022-05-24T19:15:33Z", "published": "2022-05-24T19:15:33Z", "aliases": [ "CVE-2021-22953" ], "details": "A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: \"Solar Security Research Team\"", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22953" }, { "type": "WEB", "url": "https://hackerone.com/reports/1102225" }, { "type": "WEB", "url": "https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes" } ], "database_specific": { "cwe_ids": [ "CWE-352" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-09-23T13:15:00Z" } }