{"id":"CVE-2018-13790","details":"A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page.","modified":"2026-07-08T17:57:38.469687Z","published":"2018-07-09T20:29:00.957Z","references":[{"type":"EVIDENCE","url":"https://hackerone.com/reports/243865"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/concretecms/concretecms","events":[{"introduced":"72fb50290983bab46f94a111451bef022c21ad41"},{"last_affected":"72fb50290983bab46f94a111451bef022c21ad41"}],"database_specific":{"cpe":"cpe:2.3:a:concretecms:concrete_cms:8.2.0:-:*:*:*:*:*:*","extracted_events":[{"introduced":"8.2.0-NA"},{"last_affected":"8.2.0-NA"}],"source":"CPE_STRING"}}],"versions":["8.2.0-NA","8.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13790.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}