baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-94"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43792.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "4.6.0"
},
{
"last_affected": "4.7.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"cpe": "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.0"
},
{
"last_affected": "4.7.6"
}
],
"source": "CPE_RANGE"
}
]
}