What is GHSA-77fc-4cv5-hmfr?

GHSA-77fc-4cv5-hmfr is a security advisory published by GitHub Security Advisories with Medium severity. baserCMS OS command injection vulnerability in Installer

Which CVE IDs does GHSA-77fc-4cv5-hmfr cover?

GHSA-77fc-4cv5-hmfr covers the following CVE IDs: CVE-2023-51450. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-77fc-4cv5-hmfr?

GHSA-77fc-4cv5-hmfr has a CVSS v3 base score of 5.6, published by GitHub Security Advisories.

Which products are affected by GHSA-77fc-4cv5-hmfr?

GHSA-77fc-4cv5-hmfr affects 1 product, including: composer/baserproject/basercms:\u003c 5.0.9.

GHSA-77fc-4cv5-hmfrMediumCVSS 5.6

baserCMS OS command injection vulnerability in Installer

Vendor

GitHub Security Advisories

Published

February 22, 2024

Last Modified

March 22, 2026

🔗 CVE IDs covered (1)

CVE-2023-51450 →

📋 Description

There is a OS command injection in Installer Feature to baserCMS.

Target

baserCMS 5.0.8 and earlier versions

Vulnerability

Malicious command may be executed in Installer.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_73283159

🎯 Affected products1

composer/baserproject/basercms:< 5.0.9

🔗 References (5)

https://github.com/baserproject/basercms/security/advisories/GHSA-77fc-4cv5-hmfr
https://nvd.nist.gov/vuln/detail/CVE-2023-51450
https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
https://basercms.net/security/JVN_09767360
https://github.com/advisories/GHSA-77fc-4cv5-hmfr