Description
baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | baserproject/basercms | <= 3.0.14 | — | GHSA-69gw-v5ph-6vxq |
| Packagist | baserproject/basercms | >= 4.0.0, <= 4.0.5 | — | GHSA-69gw-v5ph-6vxq |
References
- https://basercms.net/security/JVN78151490
- JVN#78151490 third-party-advisory