CVE-2011-2674
BaserCMS privilege escallation
Summary
BaserCMS privilege escallation
Original description
The description as published by the source.
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
baserproject/basercms
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web basercms.net
- web jvn.jp
- web jvndb.jvn.jp