Back to Database
Status published
Unknown
CVE-2022-43686
In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0...
Vulnerability Description
In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2, the authTypeConcreteCookieMap table can be filled up causing a denial of service (high load).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43686
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/concretecms/concretecms/releases/9.1.3
- https://github.com/concretecms/concretecms/releases/8.5.10
- https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes
- https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes
- https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31
More from concretecms
View All →CVE-2022-43968
Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and...
Unknown
0
CVE-2022-43967
Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and...
Unknown
0
CVE-2022-43695
Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and...
Unknown
0
CVE-2022-43694
Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and...
Unknown
0
CVE-2022-43693
Concrete CMS is vulnerable to CSRF due to the lack...
Unknown
0
Affected Vendor
concretecms
View all reports →Affected Software
concrete cms
Vulnerable Versions:
0, 9.0.0
Timeline
Official Publish:
November 14th, 2022
Last Modified:
April 30th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.