Sensitive Information Exposure in Connect-CMS: Viewing Restrictions Bypass
Summary
GHSA-2237-5r9w-vm8j: Connect-CMS information that is restricted to viewing is visible. Affects opensource-workshop/connect-cms versions < 1.8.4. Fixed in 1.8.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Connect-CMS is an open-source content management system designed for ease of use and flexibility in managing web content. It allows users to create, publish, and manage various types of content while providing features such as frame publishing, IP restrictions, and password-protected pages. However, a vulnerability was identified in versions 1.8.0 to 1.8.3, where restricted information could still be accessed through the main text, undermining the intended privacy and security measures.
Vulnerability Detail
The vulnerability arises from a flaw in the search functionality of Connect-CMS, where information that is meant to be restricted from public viewing can still be displayed in the main text of search results. This issue was introduced in version 1.8.0 and affects versions up to 1.8.3. The implications include unauthorized access to sensitive information, which could lead to data breaches or exposure of confidential content. The vulnerability is classified under CWE-200, indicating improper handling of sensitive information.
How To Fix
Minimum fixed version
1.8.4
This is the first release that contains the fix.
composer require opensource-workshop/connect-cms:1.8.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can remove the site search feature or hide frames to prevent unauthorized access to restricted information. This can be done by modifying the site's configuration settings to disable search functionality.
Conclusion
The identified vulnerability in Connect-CMS poses a significant risk by allowing unauthorized access to restricted information. It is crucial for users to update to version 1.8.4 or later to mitigate this risk. Additionally, implementing the suggested workaround can provide temporary relief until the update is performed.
See every vulnerability recorded for opensource-workshop/connect-cms →
FAQ
Versions 1.8.0 to 1.8.3 of Connect-CMS are affected by this vulnerability.
Sensitive information that is restricted from viewing, such as private content and password-protected pages, can be exposed through the main text in search results.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check if your application is affected by this vulnerability using the Vulert playground without any signup at Vulert Scanner.
If you cannot update immediately, consider implementing the suggested workaround by removing the site search feature or hiding frames to mitigate the risk.
Currently, there are no specific references provided for this vulnerability, but you can stay updated through the official Connect-CMS repository.
References
Related vulnerabilities
Recent vulnerabilities recorded for opensource-workshop/connect-cms.
