Lucene search
+L

9 matches found

osv_cve
osv_cve
•added 2026/03/23 9:37 p.m.•36 views

CVE-2026-32299 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS5.7AI score0.00278EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/03/23 9:37 p.m.•65 views

CVE-2026-32299 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS0.00278EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/23 9:37 p.m.•11 views

CVE-2026-32299 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS5.7AI score0.00278EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/23 9:37 p.m.•14 views

CVE-2026-32299

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

8.7CVSS5.7AI score0.00278EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/03/23 8:38 p.m.•10 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through insufficient authorization checks in the page content retrieval. An attacker can access the contents and attachments of non-public pages by sending unauthorized requests. Remediation Upgrade...

7.5CVSS5.8AI score0.00278EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/03/23 8:38 p.m.•26 views

GHSA-62CH-J6X7-722J Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Security Advisory — Page Content Retrieval Improper Authorization Summary An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

7.5CVSS6AI score0.00278EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/03/23 8:38 p.m.•37 views

EUVD-2026-14574

Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature...

7.5CVSS5.9AI score0.00278EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/03/23 8:38 p.m.•45 views

Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Security Advisory — Page Content Retrieval Improper Authorization Summary An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

7.5CVSS6AI score0.00278EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•10 views

CVE-2026-32299: Improper Access Control

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS5.7AI score0.00278EPSS
SaveExploits0References1
Rows per page
Query Builder