PT-2023-33055 · Unknown · Connect-Cms

Published 2023-07-05 · Updated 2023-07-05

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Connect-CMS versions 1.7.1 and earlier Connect-CMS versions 2.3.1 and earlier

Description There is a Privilege Escalation issue on the management system of Connect-CMS.

Recommendations For Connect-CMS versions 1.7.1 and earlier, upgrade to version 1.7.2 or later. For Connect-CMS versions 2.3.1 and earlier, upgrade to a version later than 2.3.1. As a temporary workaround, consider upgrading Connect-CMS to the latest version.

Fix

Related Identifiers

GHSA-QXH3-JGVH-X55J

Affected Products

Connect-Cms

References · 3

• https://osv.dev/vulnerability/GHSA-qxh3-jgvh-x55j · Vendor Advisory
• https://github.com/opensource-workshop/connect-cms · Note
• https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-qxh3-jgvh-x55j · Note