Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-43649 EUVD-2023-2734GHSA-fw9x-cqjq-7jx5

baserCMS CSRF vulnerability in Content preview Feature

Published Oct 30, 2023 · Updated Sep 5, 2024 · Assigned by GitHub_M

Description

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue.

Affected products

VendorProductAffectedFixed
baserproject basercms < 4.8.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 4.8.0 4.8.0 GHSA-fw9x-cqjq-7jx5

References