baserproject/basercms · Security
baserCMS Access Control Bypass
- GHSA ID
- GHSA-v9gf-98vr-mgp2
- CVE ID
- CVE-2015-5640
- Severity
- medium
- Published
- Updated
Description
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.