Concrete CMS Unauthenticated File Usage Disclosure Vulnerability

A vulnerability exists in Concrete CMS versions through 9.5.0, allowing unauthenticated users to access file usage information without proper permission checks. By sending a request to the usage controller with a specific file ID, an attacker can obtain a list of all pages referencing that file, including sensitive details such as page IDs, handles, and full URLs. This issue also exposes information from pages that are normally restricted by permissions.

Impact

Exploitation of this vulnerability leads to unauthorized disclosure of file usage information, including references from permission-restricted pages.

Remediation

Users can upgrade to Concrete CMS version 9.5.1 or later to address this vulnerability.