Vulnerability Database

314,432

Total vulnerabilities in the database

CVE-2024-32643

Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, if the URL to the page is modified to include a /tag/ declaration, the CMS will render the page regardless of group restrictions. This vulnerability is fixed in 7.2.8, 7.3.13, and 7.4.6.

  • Published: Dec 3, 2025
  • Updated: Dec 6, 2025
  • CVE: CVE-2024-32643
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
masacms / masacms - 7.2.8
masacms / masacms 7.3 7.3.13
masacms / masacms 7.4.0 7.4.6