Connect-CMS Privilege Escalation Vulnerability

MEDIUM 4.3GHSA-qxh3-jgvh-x55j · Published 05/07/2023 · updated 07/02/2025

In short

GHSA-qxh3-jgvh-x55j is a MEDIUM (CVSS 4.3) vulnerability affecting opensource-workshop/connect-cms.
Fix: update to 2.3.2, 1.7.2 or later.

Package	Affected versions	Patched versions
opensource-workshop/connect-cms Packagist	`≥ 2.0.0, < 2.3.2< 1.7.2`	`2.3.21.7.2`

There is a Privilege Escalation Vulnerability on the management system of Connect-CMS. Affercted Version : Connect-CMS 1.7.1, 2.3.1 and earlier

version 1.7.2, 2.3.1

Upgrade Connect-CMS to latest version

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 2.0.0, < 2.3.2< 1.7.2

2.3.21.7.2

More vulnerabilities in opensource-workshop/connect-cms

See all →