Vulnerability CVE-2023-25654


Published: 2023-03-23

Description:
baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.

Type:

CWE-434

(Unrestricted Upload of File with Dangerous Type)

 References:
https://github.com/baserproject/basercms/commit/60f83054d8131b0ace60716cec7e629b5eb3a8f0
https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5
https://github.com/baserproject/basercms/commit/002886be0998c74c386e04f0b43688a8a45d7a96
https://github.com/baserproject/basercms/security/advisories/GHSA-h4cc-fxpp-pgw9
https://github.com/baserproject/basercms/commit/08247f0a633d8e836ce2e5cd2d53aa19901a1359

Copyright 2024, cxsecurity.com

 

Back to Top