HexBrain

Concrete CMS · Report #6475

https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)

Validstatus
3upvotes
9 Apr 2014disclosed

How it was found

Pls see attachment files for details: python ssltest.py concrete5.org 443|more

impact: critical, pls patch it ASAP

References: https://www.openssl.org/news/secadv_20140407.txt http://heartbleed.com https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3 ~g4mm4 https://twitter.com/xchym

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original