ГлавнаяУязвимости → CVE-2026-32299
7.5высокая

CVE-2026-32299

Описание

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and 2.41.1 contain a patch.

Затрагиваемое ПО
Opensource-workshop Connect-cms
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Источники
https://github.com/opensource-workshop/connect-cms/releases/tag/v1.41.1https://github.com/opensource-workshop/connect-cms/releases/tag/v2.41.1https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-62ch-j6x7-722j