What is GHSA-6wr6-54mw-mvhr?

GHSA-6wr6-54mw-mvhr is a security advisory published by GitHub Security Advisories with Medium severity. BaserCMS privilege escallation

Which CVE IDs does GHSA-6wr6-54mw-mvhr cover?

GHSA-6wr6-54mw-mvhr covers the following CVE IDs: CVE-2011-2674. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-6wr6-54mw-mvhr?

GHSA-6wr6-54mw-mvhr affects 1 product, including: composer/baserproject/basercms:\u003c 1.6.12.

GHSA-6wr6-54mw-mvhrMedium

BaserCMS privilege escallation

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

January 15, 2024

🔗 CVE IDs covered (1)

CVE-2011-2674 →

📋 Description

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

🎯 Affected products1

composer/baserproject/basercms:< 1.6.12

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2011-2674
http://basercms.net/patch/JVN09789751
http://jvn.jp/en/jp/JVN16617002/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066
https://github.com/advisories/GHSA-6wr6-54mw-mvhr