CVE-2021-40102
CVE-2021-40102
An issue was discovered in Concrete CMS through 8.5.5. Arbitrary File deletion can occur via PHAR deserialization in is_dir (PHP Object Injection associated with the __wakeup magic method).
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →