GHSA-5rjc-jc28-cwgg: Connect-CMS Access control vulnerability

February 7, 2025

Impact（影響）

There is an Access control vulnerability on the management system of Connect-CMS. Affected Version : Connect-CMS v1.8.6, 2.4.6 and earlier

Patches（修正バージョン）

version v1.8.7, v2.4.7

Workarounds（運用回避手段）

Upgrade Connect-CMS to latest version

References

github.com/advisories/GHSA-5rjc-jc28-cwgg
github.com/opensource-workshop/connect-cms
github.com/opensource-workshop/connect-cms/security/advisories/GHSA-5rjc-jc28-cwgg

Code Behaviors & Features

Detect and mitigate GHSA-5rjc-jc28-cwgg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →