PT-2023-33055 · Unknown · Connect-Cms

Publicado 2023-07-05 · Atualizado 2023-07-05

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Connect-CMS versions 1.7.1 and earlier Connect-CMS versions 2.3.1 and earlier

Description There is a Privilege Escalation issue on the management system of Connect-CMS.

Recommendations For Connect-CMS versions 1.7.1 and earlier, upgrade to version 1.7.2 or later. For Connect-CMS versions 2.3.1 and earlier, upgrade to a version later than 2.3.1. As a temporary workaround, consider upgrading Connect-CMS to the latest version.

Correção

Identificadores relacionados

GHSA-QXH3-JGVH-X55J

Produtos afetados

Connect-Cms

Referências · 3

• https://github.com/opensource-workshop/connect-cms · Nota
• https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-qxh3-jgvh-x55j · Nota
• https://osv.dev/vulnerability/GHSA-qxh3-jgvh-x55j · Aviso do Fabricante