GHSA-5rjc-jc28-cwgg: Connect-CMS Access control vulnerability

February 7, 2025

Impact（影響）

There is an Access control vulnerability on the management system of Connect-CMS. Affected Version : Connect-CMS v1.8.6, 2.4.6 and earlier

Patches（修正バージョン）

version v1.8.7, v2.4.7

Workarounds（運用回避手段）

Upgrade Connect-CMS to latest version

References

github.com/advisories/GHSA-5rjc-jc28-cwgg
github.com/opensource-workshop/connect-cms
github.com/opensource-workshop/connect-cms/security/advisories/GHSA-5rjc-jc28-cwgg

Code Behaviors & Features

Detect and mitigate GHSA-5rjc-jc28-cwgg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →