HIGH8.8

GHSA-fg52-rc36-jp43

baserCMS Cross Site Request Forgery vulnerability

Quick fix

GHSA-fg52-rc36-jp43 — baserproject/basercms: upgrade to the fixed version with the command below.

composer require baserproject/basercms:^3.0.11

Details

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms

Introduced in: 0Fixed in: 3.0.11

Fixcomposer require baserproject/basercms:^3.0.11

References

https://nvd.nist.gov/vuln/detail/CVE-2016-4878[ADVISORY]
https://github.com/baserproject/basercms[PACKAGE]
https://jvn.jp/en/jp/JVN92765814/index.html[WEB]
https://web.archive.org/web/20210308130052/http://www.securityfocus.com/bid/93217[WEB]
http://basercms.net/security/JVN92765814[WEB]