GHSA-qxh3-jgvh-x55j: Connect-CMS Privilege Escalation Vulnerability

July 5, 2023 (updated February 7, 2025)

Impact（影響）

There is a Privilege Escalation Vulnerability on the management system of Connect-CMS. Affercted Version : Connect-CMS 1.7.1, 2.3.1 and earlier

Patches（修正バージョン）

version 1.7.2, 2.3.1

Workarounds（運用回避手段）

Upgrade Connect-CMS to latest version

References

github.com/advisories/GHSA-qxh3-jgvh-x55j
github.com/opensource-workshop/connect-cms
github.com/opensource-workshop/connect-cms/security/advisories/GHSA-qxh3-jgvh-x55j

Code Behaviors & Features

Detect and mitigate GHSA-qxh3-jgvh-x55j with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →