CVE-2024-3181 | Concrete CMS up to 8.5.15/9.2.7 Search Field os command injection

A vulnerability was found in Concrete CMS up to 8.5.15/9.2.7. It has been declared as critical. This vulnerability affects unknown code of the component Search Field. The manipulation leads to os command injection.

This vulnerability was named CVE-2024-3181. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.