baserCMS Access Control Bypass · CVE-2015-5640 · GitHub Advisory Database · GitHub

baserCMS Access Control Bypass

Moderate severity GitHub Reviewed Published May 13, 2022 to the GitHub Advisory Database • Updated Aug 1, 2023

Package

baserproject/basercms (Composer)

Affected versions

<= 3.0.7

Patched versions

3.0.8

Description

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

References

Published by the National Vulnerability Database

Oct 6, 2015

Published to the GitHub Advisory Database May 13, 2022

Reviewed Aug 1, 2023

Last updated Aug 1, 2023