MEDIUM5.3
GHSA-g4gm-pxh3-29fq
Unrestricted Uploads in Concrete5
Quick fix
GHSA-g4gm-pxh3-29fq — concrete5/concrete5: upgrade to the fixed version with the command below.
composer require concrete5/concrete5:^8.5.3Details
Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/concrete5/concrete5
Introduced in:
0Fixed in: 8.5.3Fix
composer require concrete5/concrete5:^8.5.3