CVE-2022-43689

—

CVSS 3.1

5.3 medium

EPSS

<1%p50

Published

Nov 14, 2022 (Nov 14, 2022)

Modified

Jun 17, 2026

Description

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure.

Vendors: concretecms
Products: concrete cms
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.