GHSA-j5g9-j7r4-6qvx
Dashboard / Vulnerabilities / GHSA-j5g9-j7r4-6qvx
Summary: Craft CMS Privilege Escalation
Details: ### Impact This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft with certain user permissions setups. ### Patches This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensure they are running at least those versions. ### References https://github.com/craftcms/cms/pull/13932 https://github.com/craftcms/cms/pull/13931 https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4511---2023-11-16 https://github.com/craftcms/cms/blob/v3/CHANGELOG.md#396---2023-11-16
References: https://github.com/craftcms/cms/security/advisories/GHSA-j5g9-j7r4-6qvx, https://nvd.nist.gov/vuln/detail/CVE-2024-21622, https://github.com/craftcms/cms/pull/13931, https://github.com/craftcms/cms/pull/13932, https://github.com/craftcms/cms/commit/76caf9af07d9964be0fd362772223be6a5f5b6aa, https://github.com/craftcms/cms/commit/be81eb653d633833f2ab22510794abb6bb9c0843, https://github.com/craftcms/cms, https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4511---2023-11-16, https://github.com/craftcms/cms/blob/v3/CHANGELOG.md#396---2023-11-16
Affected packages
Package
Name: craftcms/cms
Purl: pkg:composer/craftcms/cms
Affected ranges
Type: ECOSYSTEM
Events:
