{"action":"Upgrade opensource-workshop/connect-cms to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"0"},{"fixed":"2.3.2","introduced":"2.0.0"}],"component":"opensource-workshop/connect-cms","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.7.2","2.3.2"],"ghsa_id":"GHSA-qxh3-jgvh-x55j","id":"tcs_01M5KF7QJD3MS4C50J27W71N5F","modified_at":"2025-02-07T18:00:50.308776Z","published_at":"2023-07-05T22:40:22Z","references":["https://osv.dev/vulnerability/GHSA-qxh3-jgvh-x55j","https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-qxh3-jgvh-x55j","https://github.com/opensource-workshop/connect-cms"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-qxh3-jgvh-x55j","url":"https://osv.dev/vulnerability/GHSA-qxh3-jgvh-x55j"}],"summary":"Connect-CMS Privilege Escalation Vulnerability"}