CVE-2023-51450: baserCMS OS command injection vulnerability in Installer
baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.
Other sources
There is a OS command injection in Installer Feature to baserCMS.
Target baserCMS 5.0.8 and earlier versions
Vulnerability Malicious command may be executed in Installer.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN73283159
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51450?
CVE-2023-51450 has been rated as a critical severity vulnerability due to the potential for OS command injection.
How do I fix CVE-2023-51450?
To fix CVE-2023-51450, upgrade baserCMS to version 5.0.9 or later.
What software is affected by CVE-2023-51450?
CVE-2023-51450 affects baserCMS versions prior to 5.0.9.
What is the impact of CVE-2023-51450?
The impact of CVE-2023-51450 allows attackers to execute arbitrary OS commands on the server.
Is there a known exploit for CVE-2023-51450?
Yes, there are known exploit methods for CVE-2023-51450 that leverage the OS command injection in the site search feature.