Executive Summary

Concrete CMS version 9.5.0 and below has a vulnerability in its DeleteFile controller caused by an inverted CSRF token check. Instead of preventing unauthorized actions when the CSRF token is invalid or missing, the code erroneously throws an error when the token is valid and proceeds with file deletion when the token is invalid or missing. This flaw disables CSRF protection for the file deletion endpoint.

As a result, attackers can perform cross-site request forgery (CSRF) attacks to delete files without proper authorization, targeting users who have permission to edit conversation messages.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to delete files without proper authorization by exploiting the disabled CSRF protection on the file deletion endpoint.

If you are a user with permission to edit conversation messages, an attacker could trick you into unknowingly deleting files, potentially leading to data loss or disruption of service.

Useful 0 Not Useful 0