Concrete CMS Cross-Site Request Forgery Vulnerability in File Version Approval

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Concrete CMS versions through 9.5.0. The issue resides in the Backend\File::approveVersion method, where a victim with edit_file_contents permission can be manipulated into publishing a version of a file chosen by an attacker. This exploitation allows for downgrading to an older file version or activating an unpublished version from a co-editor.

Impact

Exploitation of this vulnerability could lead to unauthorized file version changes, allowing for potential downgrades of files or activation of unpublished versions, disrupting collaborative workflows and file management processes.

Remediation

Users should upgrade to Concrete CMS version 9.5.1 or later, where this vulnerability has been fixed.