GHSA-6hpg-8rx3-cwgv
baserCMS has OS command injection vulnerability in installer
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | baserproject/basercms | < 5.2.3 | 5.2.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
baserCMS has an OS command injection vulnerability in the installer.
### Target
baserCMS 5.2.2 and earlier versions
### Vulnerability
If baserCMS is placed on a server but not installed, malicious commands may be executed.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_54513170
### Credits
REN XINGDIAN
References
External links from the advisory. They lead to third-party sites.