Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability description specifies a Cross-Site Request Forgery (CSRF) in the approveVersion() function within concrete/controllers/backend/file.php. By analyzing the commits between the vulnerable version (9.5.0) and the patched version (9.5.1), I identified the security fix commit f22b9dff59454391a50a255a39995bf635deea9e. This commit's patch for concrete/controllers/backend/file.php clearly shows the addition of a CSRF token validation check in the approveVersion function, which was previously absent. This confirms that this function was the source of the vulnerability. The same commit also applied similar CSRF protection to other functions in the same file (star, rescan, addFavoriteFolder, removeFavoriteFolder), indicating they were also vulnerable.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| concrete5/concrete5 | composer | >= 9.0.0RC1, < 9.5.1 | 9.5.1 |
