CyberRota Analysis
AI-GeneratedConcrete CMS versions 9.5.0 to 9.5.2 are vulnerable to an Open Redirect flaw via the rcURL parameter, allowing attackers to redirect authenticated users to arbitrary external sites, which can lead to phishing and credential theft. This vulnerability also affects the registration flow, providing an additional attack vector for sites with registration enabled. Organizations using these versions of Concrete CMS should prioritize remediation to protect their users from potential phishing attacks.
Original NVD Description
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same handling is present in the registration flow, giving a second entry point on sites with registration enabled. Concrete CMS versions prior to 9.5.0 do not include the rcURL parameter or this allowlist and are not affected. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 5.3 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks Michal M. for reporting.