CVE-2016-4886: CSRF

Published May 12, 2017

Updated

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected Software

1 affected component

baserCMS BaserCMS=3.0.10

Remediation

Patch Available

http://basercms.net/security/JVN92765814

Event History

May 12, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-4886?

CVE-2016-4886 is classified as a high severity vulnerability due to its potential to allow remote attackers to hijack administrator authentication.

How do I fix CVE-2016-4886?

To fix CVE-2016-4886, upgrade to baserCMS plugin Mail version 3.0.11 or later, which addresses the CSRF vulnerability.

Who is affected by CVE-2016-4886?

CVE-2016-4886 affects installations of baserCMS Mail version 3.0.10 and earlier.

What type of vulnerability is CVE-2016-4886?

CVE-2016-4886 is a cross-site request forgery (CSRF) vulnerability.

What are the potential impacts of CVE-2016-4886?

CVE-2016-4886 could allow an attacker to perform actions on behalf of an administrator without their consent, potentially compromising the system.