Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mr7q-fv7j-jcgv

Опубликовано: 24 окт. 2024
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request

XSS vulnerability in HTTP 400 Bad Request to baserCMS.

Target

baserCMS 5.1.1 and earlier versions

Vulnerability

Malicious code may be executed in HTTP 400 Bad Request.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_00876083

Пакеты

Наименование

baserproject/basercms

composer
Затронутые версииВерсия исправления

<= 5.1.1

5.1.2

EPSS

Процентиль: 70%
0.00642
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 1 года назад

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue.

EPSS

Процентиль: 70%
0.00642
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79