Access Restriction Bypass in baserCMS Affects Multiple Versions

CVE-2018-0573

What is CVE-2018-0573?

A vulnerability exists in baserCMS that allows remote attackers to bypass established access restrictions, potentially granting unauthorized access to view files uploaded by site users. This issue arises from unspecified vectors that mishandle access control, enabling malicious actors to exploit the weakness and expose sensitive content. Users of baserCMS versions 4.1.0.1 and earlier, as well as 3.0.15 and earlier, are particularly at risk, emphasizing the need for immediate attention and remediation.

References