3Nis
CVE-2024-3181 | Concrete CMS up to 8.5.15/9.2.7 Search Field os command injection
A vulnerability was found in Concrete CMS up to 8.5.15/9.2.7. It has been declared as critical. This vulnerability affects unknown code of the component Search Field. The manipulation leads to os command injection. This vulnerability was named CVE-2024-3181. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.