High · 8.8 CVE-2016-4879 EUVD-2022-2147GHSA-397g-4jpj-44xg

CSRF in baserCMS 3.0.10 and earlier

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: baserCMS plugin Mail Package: baserproject/basercms Ecosystem: Packagist

Description

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
baserCMS Users Community	baserCMS plugin Mail	version 3.0.10 and earlier	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	baserproject/basercms	<= 3.0.10	—	GHSA-397g-4jpj-44xg

References

http://basercms.net/security/JVN92765814
JVN#92765814 third-party-advisory
93217 vdb-entry