Lucene search

GoogleOSV:CVE-2023-51450

HistoryFeb 22, 2024 - 3:15 p.m.

CVE-2023-51450

2024-02-2215:15:08

Google

osv.dev

basercms

command injection

site search

vulnerability

version 5.0.9

fix

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.5%

JSON

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.

CPENameOperatorVersion
basercmseqbasercms-4.0.0
basercmseq4.2.1
basercmseqbasercms-4.5.1
basercmseqbasercms-4.5.4
basercmseqbasercms-4.4.0
basercmseqbasercms-4.0.5.2
basercmseqbasercms-3.0.5
basercmseq2.0.0-rc3
basercmseq3.0.10
basercmseq5.0.7

Name	Operator	Version
basercms	eq	basercms-4.0.0
basercms	eq	4.2.1
basercms	eq	basercms-4.5.1
basercms	eq	basercms-4.5.4
basercms	eq	basercms-4.4.0
basercms	eq	basercms-4.0.5.2
basercms	eq	basercms-3.0.5
basercms	eq	2.0.0-rc3
basercms	eq	3.0.10
basercms	eq	5.0.7

Rows per page:

1-10 of 1641

References

basercms.net/security/JVN_09767360

github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c

github.com/baserproject/basercms/security/advisories/GHSA-77fc-4cv5-hmfr

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.5%

JSON

Related for OSV:CVE-2023-51450