MEDIUM
GHSA-v9gf-98vr-mgp2
baserCMS Access Control Bypass
Quick fix
GHSA-v9gf-98vr-mgp2 — baserproject/basercms: upgrade to the fixed version with the command below.
composer require baserproject/basercms:^3.0.8Details
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/baserproject/basercms
Introduced in:
0Fixed in: 3.0.8Fix
composer require baserproject/basercms:^3.0.8