A vulnerability, which was classified as problematic, has been found in Concrete CMS up to 9.2.2. Affected by this issue is some unknown functionality of the file /ccm/system/dialogs/file/delete/1/submit. The manipulation leads to cross-site request forgery.
This vulnerability is handled as CVE-2023-48651. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
