CVE-2018-13790: Concretecms Concrete CMS

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.

Affected products

• Concretecms Concrete CMS: version 8.2.0 only

Published 2018-07-09. Last modified 2026-06-17.