baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Basercms | Basercms | 3.0.0 (including) | 3.0.15 (including) |
| Basercms | Basercms | 4.0.0 (excluding) | 4.1.0.1 (including) |