Threats Tagged 'ghsa-6h73-cg9r-6xcf'
View all threats tagged with 'ghsa-6h73-cg9r-6xcf'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-6h73-cg9r-6xcf'
Click on any threat for detailed analysis and mitigation recommendations
Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting… (CVE-2026-81904)CVE-2026-81904 0 Concrete CMS versions below 9.5.3 have a vulnerability where view assets for every sub-block of a Stack, Container, or layout area are registered without verifying if the requesting user has permission to view that sub-block. This allows an unauthenticated visitor to access configuration values, such as a Google Maps API key, from any public page embedding the affected components, bypassing block-level permission restrictions. The vulnerability affects any sub-block type that outputs configuration values via asset or header hooks. Join the discussion | GCVE Database | 09/09/2026, 00:30:29 UTC Added: 09/09/2026, 00:52:50 UTC |
Showing 1 to 1 of 1 result