Vulnerability in Basercms

CVE-2011-2674

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

EPSS: 0.013 (68.5th percentile) — read the EPSS interpretation.

Affected products

  • Basercms — versions 1.5.4, 1.5.5, 1.5.6
  • N/a — versions n/a

Weakness classification (CWE)

References