CVE-2018-0572 — Basercms vulnerability

3 documents3 sources
Severity
8.1HIGHNVD
EPSS
0.2%
top 58.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Baserproject BasercmsBasercmsBasercms Users Community Basercms
Timeline
PublishedJun 26
Latest updateMay 13

Description

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages3 packages

▶Packagistbaserproject/basercms4.0.0 — 4.1.1+1
▶NVDbasercms/basercms3.0.0 — 3.0.15+1
▶CVEListV5basercms_users_community/basercms(baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions)

🔴Vulnerability Details

2
GHSA
baserCMS vulnerable to Access Control Bypass↗2022-05-13
▶
OSV
baserCMS vulnerable to Access Control Bypass↗2022-05-13
▶