CVE-2011-2674
BaserCMS privilege escallation
Résumé
BaserCMS privilege escallation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
baserproject/basercms
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web basercms.net
- web jvn.jp
- web jvndb.jvn.jp