medium6.5
CVE-2015-5640
baserCMS Access Control Bypass
Impact
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | <= 3.0.7 | 3.0.8 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | through 3.0.7 |