BaserCMS privilege escallation

2022-05-1301:08:49

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

JSON

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

CPENameOperatorVersion
baserproject/basercmseq0.0.1
baserproject/basercmseq0.0.3
baserproject/basercmseq1.0.0
baserproject/basercmseq0.0.6
baserproject/basercmseq0.0.5
baserproject/basercmseq0.0.8
baserproject/basercmseq0.0.2
baserproject/basercmseq0.0.7
baserproject/basercmseq0.0.4

Name	Operator	Version
baserproject/basercms	eq	0.0.1
baserproject/basercms	eq	0.0.3
baserproject/basercms	eq	1.0.0
baserproject/basercms	eq	0.0.6
baserproject/basercms	eq	0.0.5
baserproject/basercms	eq	0.0.8
baserproject/basercms	eq	0.0.2
baserproject/basercms	eq	0.0.7
baserproject/basercms	eq	0.0.4