PT-2025-6213 · Unknown · Connect-Cms

Published 2025-02-07 · Updated 2025-02-07

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Connect-CMS versions 1.8.6 and earlier Connect-CMS versions 2.4.6 and earlier

Description: There is an access control issue on the management system of Connect-CMS.

Recommendations: For Connect-CMS versions 1.8.6 and earlier, upgrade to version 1.8.7 or later. For Connect-CMS versions 2.4.6 and earlier, upgrade to version 2.4.7 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

GHSA-5RJC-JC28-CWGG

Affected Products

Connect-Cms

References · 3

• https://osv.dev/vulnerability/GHSA-5rjc-jc28-cwgg · Vendor Advisory
• https://github.com/opensource-workshop/connect-cms · Note
• https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-5rjc-jc28-cwgg · Note