baserCMS Website Development Framework Vulnerable to OS Command Injection

CVE-2023-51450

What is CVE-2023-51450?

An OS command injection vulnerability has been identified in the site search feature of BaserCMS, a widely used website development framework. This security issue affects all versions of BaserCMS prior to 5.0.9. If exploited, attackers could inject and execute arbitrary OS commands, potentially compromising the server and its applications. BaserCMS version 5.0.9 includes a patch that mitigates this vulnerability, emphasizing the importance of upgrading to that version or later to maintain site security. For more details on how to address this vulnerability, refer to the official advisory and commit notes provided by the Baser Project.

References