MEDIUM5.3
GHSA-w935-p7mg-xc96
Sensitive Data Exposure in baserCMS
Details
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/baserproject/basercms
Introduced in:
4.0.0No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.
Packagist/baserproject/basercms
Introduced in:
0No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.