HIGH8.8

GHSA-397g-4jpj-44xg

CSRF in baserCMS 3.0.10 and earlier

Details

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms

Introduced in: 0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2016-4879[ADVISORY]
https://jvn.jp/en/jp/JVN92765814/index.html[WEB]
https://web.archive.org/web/20210308130052/http://www.securityfocus.com/bid/93217[WEB]
http://basercms.net/security/JVN92765814[WEB]