Packagist/impresscms/impresscms CVE-2021-26598: medium 5.3, EPSS 10.53%

Incorrect Access Control in ImpressCMS

Action: Upgrade impresscms/impresscms to 1.4.3 or later.

composer require impresscms/impresscms:1.4.3

Affected

Fixed versions

Sources

• osv: GHSA-48p3-xfvw-g59c
• https://nvd.nist.gov/vuln/detail/CVE-2021-26598
• https://github.com/ImpressCMS/impresscms/pull/967
• https://hackerone.com/reports/1081137
• https://github.com/ImpressCMS/impresscms
• https://github.com/ImpressCMS/impresscms/releases/tag/v1.4.3
• https://packetstormsecurity.com/files/166403/ImpressCMS-1.4.2-Incorrect-Access-Control.html
• http://karmainsecurity.com/KIS-2022-03
• http://seclists.org/fulldisclosure/2022/Mar/45

CVE-2021-26598 · published 2022-03-29T00:01:16Z · modified 2023-11-08T04:05:21.543881Z · JSON