CVE-2023-28473: Concretecms Concrete CMS

Low severity, CVSS 3.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section.

Affected products

• Concretecms Concrete CMS: before 9.2.0 (fixed in 9.2.0)

Published 2023-04-28. Last modified 2026-06-17.