High · 8.8 CVE-2016-4881 EUVD-2022-2319GHSA-46vm-rwrf-jrxm

CSRF in baserCMS 3.0.10 and earlier

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: baserCMS plugin Blog Package: baserproject/basercms Ecosystem: Packagist

Description

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
baserCMS Users Community	baserCMS plugin Blog	version 3.0.10 and earlier	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	baserproject/basercms	< 3.0.11	3.0.11	GHSA-46vm-rwrf-jrxm

References

http://basercms.net/security/JVN92765814
JVN#92765814 third-party-advisory
93217 vdb-entry