CVE-2015-5640
baserCMS Access Control Bypass
EPSS 0.44%
Description
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.
How to fix CVE-2015-5640
To remediate CVE-2015-5640, upgrade the affected package to a fixed version below.
- Packagist/baserproject/basercms—upgrade to 3.0.8 or later
Is CVE-2015-5640 being exploited?
Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.0.8