fkie_cve-2022-46464

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Withdrawn: GHSA-7vx2-5349-qj99 — Withdrawn: ConcreteCMS vulnerable to Xpath injection attacks

Withdrawn by the publisher.

Affected: Packagist: concrete5/concrete5

## Withdrawn This advisory has been withdrawn because it has been found not to be a security issue and withdrawn by its CNA. Please see the message from NVD [here](https://nvd.nist.gov/vuln/detail/CVE-2022-46464) for more information. This link is maintained to preserve external references.

## Original Description

ConcreteCMS v9.1.3 was discovered to be vulnerable to Xpath injection attacks. This vulnerability allows attackers to access sensitive XML data via a crafted payload injected into the URL path folder "3".

Most recent entries from all

fkie_cve-2022-46464

Withdrawn: GHSA-7vx2-5349-qj99 — Withdrawn: ConcreteCMS vulnerable to Xpath injection attacks

gsd-2022-46464