CRITICAL9.8

GHSA-jc94-wp59-pq4f

baserCMS SQL Injection vulnerability

Quick fix

GHSA-jc94-wp59-pq4f — baserproject/basercms: upgrade to the fixed version with the command below.

composer require baserproject/basercms:^3.0.15

Details

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms

Introduced in: 0Fixed in: 3.0.15

Fixcomposer require baserproject/basercms:^3.0.15

Packagist/baserproject/basercms

Introduced in: 4.0.0Fixed in: 4.0.6

Fixcomposer require baserproject/basercms:^4.0.6

References

https://nvd.nist.gov/vuln/detail/CVE-2017-10842[ADVISORY]
https://basercms.net/security/JVN78151490[WEB]
https://github.com/baserproject/basercms[WEB]
http://jvn.jp/en/jp/JVN78151490/index.html[WEB]