baserCMS File Uploader Remote Code Execution (RCE) vulnerability

严重 9.8CVE-2023-25654 · GHSA-h4cc-fxpp-pgw9 · Published 23/03/2023 · updated 17/06/2026

要点

CVE-2023-25654 是影响 baserproject/basercms, basercms (basercms) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.5%，高于 74.8% 的漏洞。
修复：升级到 4.7.5 或更高版本。

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`< 4.7.5`	`4.7.5`
basercms basercms	`< 4.7.5`	`4.7.5`

Description

Impact

There is a Remote Code Execution (RCE) Vulnerability on the management system of baserCMS.

Target

baserCMS 4.7.3 and earlier versions

Patches

Update to the latest version of baserCMS

Credits

島峰泰平＠三井物産セキュアディレクション株式会社

NVD description

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.

References

baserproject/basercms security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2023-25654 · ADVISORY
baserproject/basercms commit 002886b · WEB
baserproject/basercms commit 08247f0 · WEB
baserproject/basercms commit 60f8305 · WEB
baserproject/basercms · PACKAGE
baserproject/basercms release basercms-4.7.5 · WEB

baserproject/basercms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

< 4.7.5

4.7.5

basercms

< 4.7.5

4.7.5

Description

Impact

There is a Remote Code Execution (RCE) Vulnerability on the management system of baserCMS.

Target

baserCMS 4.7.3 and earlier versions

Patches

Update to the latest version of baserCMS

Credits

島峰泰平＠三井物産セキュアディレクション株式会社

NVD description

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.

baserproject/basercms 的其他漏洞

查看全部 →