Description
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | baserproject/basercms | < 3.0.8 | 3.0.8 | GHSA-v9gf-98vr-mgp2 |
References
- http://basercms.net/security/JVN04855224
- JVNDB-2015-000138 third-party-advisory
- JVN#04855224 third-party-advisory