Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25655 EUVD-2023-1060GHSA-mfvg-qwcw-qvc8

baserCMS allows any file to be uploaded

Published Mar 23, 2023 · Updated Feb 25, 2025 · Assigned by GitHub_M

Description

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch.

Affected products

VendorProductAffectedFixed
baserproject basercms < 4.7.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 4.7.5 4.7.5 GHSA-mfvg-qwcw-qvc8

References