Skip to content
OpenAdvisories
Medium · 5.6 CVE-2023-51450 EUVD-2024-0549GHSA-77fc-4cv5-hmfr

baserCMS OS command injection vulnerability in Installer

Published Feb 22, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.

Affected products

VendorProductAffectedFixed
baserproject basercms < 5.0.9 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 5.0.9 5.0.9 GHSA-77fc-4cv5-hmfr

References