NuytsTech Security

CVE-2020-14961

by ·

Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.

Date published : 2020-06-21

https://github.com/concrete5/concrete5/pull/8651

https://github.com/concrete5/concrete5/releases/tag/8.5.3

Tags: