baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.

Affected Packages

Packagist baserproject/basercms

Affected versions: 0 (fixed in 3.0.16)

Packagist baserproject/basercms

Affected versions: 4.0.0 (fixed in 4.1.1)

Related CVEs

CVE-2018-0573

Key Information

GHSA ID

GHSA-33fq-qm4m-cjw3

Published

May 13, 2022 1:48 AM

Last Modified

July 6, 2023 10:02 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

baserproject/basercms

GitHub Reviewed

✓ Yes

Dataset

Last updated: July 9, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.