{"action":"Upgrade opensource-workshop/connect-cms to 1.8.4 or later.","affected":[{"fixed":"1.8.4","introduced":"0"}],"component":"opensource-workshop/connect-cms","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.8.4"],"ghsa_id":"GHSA-2237-5r9w-vm8j","id":"tcs_01M5KERDV2NSEZPTDPMJH3F4H3","modified_at":"2025-02-07T21:01:08.594410Z","published_at":"2025-02-07T20:50:20Z","references":["https://osv.dev/vulnerability/GHSA-2237-5r9w-vm8j","https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-2237-5r9w-vm8j","https://github.com/opensource-workshop/connect-cms"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2237-5r9w-vm8j","url":"https://osv.dev/vulnerability/GHSA-2237-5r9w-vm8j"}],"summary":"Connect-CMS information that is restricted to viewing is visible"}