HIGH7.5
GHSA-9r25-4j77-9wc7
Cockpit CMS vulnerable to incorrect access control
Quick fix
GHSA-9r25-4j77-9wc7 — cockpit-hq/cockpit: upgrade to the fixed version with the command below.
composer require cockpit-hq/cockpit:^2.6.0Details
Incorrect access control in the component `/models/Content` of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/cockpit-hq/cockpit
Introduced in:
0Fixed in: 2.6.0Fix
composer require cockpit-hq/cockpit:^2.6.0