Connect-CMS Access control vulnerability

MEDIUM 4.3GHSA-5rjc-jc28-cwgg · Published 07/02/2025 · updated 07/02/2025

In short

GHSA-5rjc-jc28-cwgg is a MEDIUM (CVSS 4.3) vulnerability affecting opensource-workshop/connect-cms.
Fix: update to 2.4.7, 1.8.7 or later.

Package	Affected versions	Patched versions
opensource-workshop/connect-cms Packagist	`≥ 2.0.0, < 2.4.7< 1.8.7`	`2.4.71.8.7`

There is an Access control vulnerability on the management system of Connect-CMS. Affected Version : Connect-CMS v1.8.6, 2.4.6 and earlier

version v1.8.7, v2.4.7

Upgrade Connect-CMS to latest version

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 2.0.0, < 2.4.7< 1.8.7

2.4.71.8.7

More vulnerabilities in opensource-workshop/connect-cms

See all →