MEDIUM
GHSA-fqg3-8w8r-8g94
Concrete CMS has an unauthorized file access issue
Details
In Concrete CMS 9.5.0 and below, the submit_password() method in concrete/controllers/single_page/download_file.php allows unauthorized file access since downloading permission-restricted files bypasses the view_file permission check. Files without passwords can be downloaded and any user who knows a file's password can download a password protected file regardless of whether they have permission to access the file. The Concrete CMS security team thanks Youssef Eid for reporting this issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist / concrete5/concrete5
Introduced in:
0 Fixed in: 9.5.1 Fix
composer require concrete5/concrete5:^9.5.1