GitHub Advisoryadvisory · Maven

GHSA-fj9v-g8fw-vxmf Improper Privilege Management in craftercms

MEDIUM Published 2022-05-17 Modified 2022-09-08 Official page ↗

Aliases: CVE-2021-23265
Ecosystem: Maven
Packages: org.craftercms:craftercms
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses: CWE-269
Reviewed: 2022-06-02

Affected packages

• Maven org.craftercms:craftercms: >= 3.1.0, < 3.1.18 → fixed in 3.1.18

Description

A logged-in and authenticated user with a Reviewer Role may lock a content item.

Related

Alias · CVE (1)

CVE-2021-23265 A logged-in and authenticated user with a Reviewer Role may lock a content item. vulnerability

Weakness · CWE (1)

CWE-269 Improper Privilege Management weakness

References