GitHub Advisoryadvisory · Packagist

GHSA-v9gf-98vr-mgp2 baserCMS Access Control Bypass

MEDIUM Published 2022-05-13 Modified 2023-08-01 Official page ↗

Aliases: CVE-2015-5640
Ecosystem: Packagist
Packages: baserproject/basercms
Severity: Moderate
Reviewed: 2023-08-01

Affected packages

• Packagist baserproject/basercms: < 3.0.8 → fixed in 3.0.8

Description

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

Related

Alias · CVE (1)

CVE-2015-5640 baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request. vulnerability

References