High · 8.8 CVE-2016-4878 EUVD-2022-3771GHSA-fg52-rc36-jp43

baserCMS Cross Site Request Forgery vulnerability

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: BaserCMS Package: baserproject/basercms Ecosystem: Packagist

Description

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
baserCMS Users Community	baserCMS	version 3.0.10 and earlier	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	baserproject/basercms	< 3.0.11	3.0.11	GHSA-fg52-rc36-jp43

References

http://basercms.net/security/JVN92765814
JVN#92765814 third-party-advisory
93217 vdb-entry