Packagist/getkirby/cms CVE-2024-41964: high 8.1, EPSS 0.48%
Kirby has insufficient permission checks in the language settings
Action: Upgrade getkirby/cms to 3.6.6.6 or later.
composer require getkirby/cms:3.6.6.6composer require getkirby/cms:3.7.5.5composer require getkirby/cms:3.8.4.4composer require getkirby/cms:3.9.8.2composer require getkirby/cms:3.10.1.1composer require getkirby/cms:4.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.6.6 | - |
| 3.7.0 | 3.7.5.5 | - |
| 3.8.0 | 3.8.4.4 | - |
| 3.9.0 | 3.9.8.2 | - |
| 3.10.0 | 3.10.1.1 | - |
| 4.0.0 | 4.3.1 | - |
Fixed versions
| 3.6.6.6 | 3.7.5.5 | 3.8.4.4 | 3.9.8.2 | 3.10.1.1 | 4.3.1 |
Sources
- osv: GHSA-jm9m-rqr3-wfmh
- https://github.com/getkirby/kirby/security/advisories/GHSA-jm9m-rqr3-wfmh
- https://nvd.nist.gov/vuln/detail/CVE-2024-41964
- https://github.com/getkirby/kirby/commit/1dbc9215c97a5c22dc7f34a4e3a64d19e1eac151
- https://github.com/getkirby/kirby/commit/38636655b054e820f66c3b717c55a9d60fe6400a
- https://github.com/getkirby/kirby/commit/83fce501759782cf843b6f1d9293a7c7167e69af
- https://github.com/getkirby/kirby/commit/ab95d172667c3cd529917c2bc94d3c7969706d23
- https://github.com/getkirby/kirby/commit/af9b0a58dea63effab85525ae217faa1f5ded423
- https://github.com/getkirby/kirby/commit/e647a177c75636ef4824662b2ce00d8e5c3a8406
- https://github.com/getkirby/kirby
- https://github.com/getkirby/kirby/releases/tag/3.10.1.1
- https://github.com/getkirby/kirby/releases/tag/3.6.6.6
- https://github.com/getkirby/kirby/releases/tag/3.7.5.5
- https://github.com/getkirby/kirby/releases/tag/3.8.4.4
- https://github.com/getkirby/kirby/releases/tag/3.9.8.2
- https://github.com/getkirby/kirby/releases/tag/4.3.1
CVE-2024-41964 · published · modified · JSON