~ / search / GHSA-fj9v-g8fw-vxmf

GHSA-fj9v-g8fw-vxmf

Improper Privilege Management in craftercms

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23265

Packages

EcosystemPackageAffectedFixed in
Maven org.craftercms:craftercms >= 3.1.0, < 3.1.18 3.1.18

Details

As written in the advisory (Markdown source, shown as plain text).

A logged-in and authenticated user with a Reviewer Role may lock a content item.

References

External links from the advisory. They lead to third-party sites.