baserproject/basercms · Security
BaserCMS privilege escallation
- GHSA ID
- GHSA-6wr6-54mw-mvhr
- CVE ID
- CVE-2011-2674
- Severity
- medium
- Published
- Updated
Description
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
CWEs
- CWE-269 · Improper Privilege Management