high8.1
CVE-2018-0572
baserCMS vulnerable to Access Control Bypass
Impact
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | >= 4.0.0, <= 4.1.0.1 | 4.1.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | from 3.0.0 through 3.0.15 after 4.0.0 through 4.1.0.1 |