GitHub Advisoryadvisory · Packagist

GHSA-6wr6-54mw-mvhr BaserCMS privilege escallation

MEDIUM Published 2022-05-13 Modified 2024-01-15 Official page ↗
Aliases
CVE-2011-2674
Ecosystem
Packagist
Packages
baserproject/basercms
Severity
Moderate
Weaknesses
CWE-269
Reviewed
2024-01-15

Affected packages

• Packagist baserproject/basercms: < 1.6.12 → fixed in 1.6.12

Description

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2011-2674 BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated… vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References