CVE-2016-4876 — Cross-Site Request Forgery in Users Community Basercms

CWE-352 — Cross-Site Request Forgery2 documents2 sources
Severity
8.8HIGHNVD
EPSS
0.1%
top 69.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Basercms Users Community BasercmsBasercms
Timeline
PublishedMay 12
Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDbasercms/basercms3.0.10
▶CVEListV5basercms_users_community/basercmsversion 3.0.10 and earlier

Patches

Patch: basercms.net ↗Patch: basercms.net ↗

🔴Vulnerability Details

1
GHSA
GHSA-r75x-rc5q-788v: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3↗2022-05-17
▶