CVE-2015-5640
baserCMS Access Control Bypass
Summary
baserCMS Access Control Bypass
Original description
The description as published by the source.
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
baserproject/basercms
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web basercms.net
- web jvn.jp
- web jvndb.jvn.jp