description: A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.
problem types: Cross-Site Request Forgery (CSRF) (CWE-352)
affected:
{
product: https://github.com/concrete5/concrete5
vendor: n/a
versions:
status: affected, version: fixed in Concrete CMS v 9.0
}