MEDIUM4.3
GHSA-5rjc-jc28-cwgg
Connect-CMS Access control vulnerability
Quick fix
GHSA-5rjc-jc28-cwgg — opensource-workshop/connect-cms: upgrade to the fixed version with the command below.
composer require opensource-workshop/connect-cms:^1.8.7Details
### Impact（影響）
There is an Access control vulnerability on the management system of Connect-CMS. Affected Version : Connect-CMS v1.8.6, 2.4.6 and earlier
### Patches（修正バージョン）
version v1.8.7, v2.4.7
### Workarounds（運用回避手段）
Upgrade Connect-CMS to latest version
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/opensource-workshop/connect-cms
Introduced in:
0Fixed in: 1.8.7Fix
composer require opensource-workshop/connect-cms:^1.8.7Packagist/opensource-workshop/connect-cms
Introduced in:
2.0.0Fixed in: 2.4.7Fix
composer require opensource-workshop/connect-cms:^2.4.7