GHSA-6j3p-vrph-j7qq
GitHub Security Advisory
OS Command Injection in baserCMS
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.
Affected Packages
Packagist
baserproject/basercms
Affected versions:
4.0.0
(last affected: 4.1.0.1)
Packagist
baserproject/basercms
Affected versions:
0
(last affected: 3.0.15)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 12, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.