CVE-2023-43648

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-43648

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43648.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-43648

Aliases

GHSA-hmqj-gv2m-hq55

Published

2023-10-30T18:24:24.733Z

Modified

2026-07-08T06:10:36.017662889Z

Severity

4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

baserCMS Directory Traversal vulnerability in Form submission data management Feature

Details

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43648.json",
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/baserproject/basercms

Affected ranges

Type

GIT

Repo

https://github.com/baserproject/basercms

Events

Introduced

Fixed

d9014ad55c048264a0be07c8a95cfebff8ae4b4d

Fixed

7555a5cf0006755dc0223fffc2d882b50a97758b

Database specific

{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.8.0"
        }
    ]
}

Affected versions

2.*

2.0.0

2.0.0-beta

2.0.1

2.0.2

2.0.3

2.1.0

2.1.2

3.*

3.0.0

3.0.1

3.0.2

3.0.3

3.0.4

3.0.5

3.0.5.1

3.0.6

3.0.6-beta

3.0.7

4.*

4.0.0

4.0.0-beta

4.0.6

4.0.7

4.1.0

4.1.0.1

4.1.1

4.1.2

4.2.2

4.2.4

4.3.0

4.3.3

4.3.5

4.3.6

4.3.7

4.3.7.1

4.4.0

4.4.1.1

4.4.2.1

4.4.3

4.4.4

4.4.6

4.4.8

4.5.0

4.5.1

4.5.2

4.6.0

4.6.1

4.6.1.1

4.6.2

4.7.0

4.7.2

4.7.3

4.7.5

4.7.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43648.json"