{"id":"GHSA-6wr6-54mw-mvhr","aliases":["CVE-2011-2674"],"title":"BaserCMS privilege escallation","description":"BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.","severity":"medium","score":null,"published":"2022-05-13T01:08:49.000Z","modified":"2026-09-10T03:49:31.447Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"baserproject/basercms","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.6.12"}],"type":"ECOSYSTEM"}],"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8","1.0.0"],"fixed":["1.6.12"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-2674","https://github.com/baserproject/basercms","http://basercms.net/patch/JVN09789751","http://jvn.jp/en/jp/JVN16617002/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066"],"sources":[{"name":"OSV","id":"GHSA-6wr6-54mw-mvhr","modified":"2026-09-10T03:49:31.447734027Z","url":"https://osv.dev/vulnerability/GHSA-6wr6-54mw-mvhr"}],"assessments":[]}