PT-2023-28984
CVE-2023-43792
·
تاريخ النشر
2023-10-26
·
تاريخ التحديث
2023-11-06
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
baserCMS versions 4.6.0 through 4.7.6
Description
The issue is related to a Code Injection vulnerability in the mail form of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in the Mail Form Feature.
Recommendations
For versions 4.6.0 through 4.7.6, update to the latest version of baserCMS to resolve the issue.
As a temporary workaround, consider restricting access to the mail form feature in baserCMS until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾