GitHub Advisoryadvisory · Packagist

GHSA-vrm6-c878-fpq6 baserCMS Code Injection Vulnerability in Mail Form Feature

MEDIUM Published 2023-10-26 Modified 2023-10-26 Official page ↗
Aliases
CVE-2023-43792
Ecosystem
Packagist
Packages
baserproject/basercms
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-94
Reviewed
2023-10-26

Affected packages

• Packagist baserproject/basercms: >= 4.6.0, <= 4.7.6 (no fix yet)

Description

There is a Code Injection Vulnerability in Mail Form to baserCMS. Target baserCMS 4.7.6 and earlier versions Vulnerability Malicious code may be executed in Mail Form Feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_45547161 Credits Shiga Takuma@BroadBand Security, Inc

Related

Alias · CVE (1)

  • CVE-2023-43792 baserCMS is a website development framework. vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References