The updated description states that baserCMS contains a missing authentication check for a critical function. A remote attacker who can reach the application without valid credentials may obtain sensitive information. This flaw corresponds to an Authentication Bypass weakness (CWE‑306).

baserCMS, as distributed by the baserCMS User Community. The affected versions are not specified in the advisory, so all installations of baserCMS should be considered at risk until an updated version is available.

The CVSS score for this issue is 6.9, reflecting moderate severity. The EPSS score is < 1%, which indicates a very low but nonzero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote via the web interface, where an unauthenticated user can invoke the vulnerable function due to the missing authentication check.