CVE-2015-5640 — Basercms vulnerability

CWE-2643 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 36.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Baserproject BasercmsBasercms
Timeline
PublishedOct 6
Latest updateMay 13

Description

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages2 packages

▶Packagistbaserproject/basercms< 3.0.8

🔴Vulnerability Details

2
OSV
baserCMS Access Control Bypass↗2022-05-13
▶
GHSA
baserCMS Access Control Bypass↗2022-05-13
▶