CVE-2023-43649

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 30, 2023

Updated: Nov 6, 2023

CWE ID 352

Summary

CVE-2023-43649 is a cross-site request forgery (CSRF) vulnerability affecting the content preview feature in versions prior to 4.8.0 of baserCMS, a popular website development framework. Hackers could exploit this issue to perform unintended actions on behalf of an unsuspecting user, potentially leading to data manipulation or unauthorized functionality modifications. The flaw has been addressed in version 4.8.0, which includes a patch that mitigates this threat and safeguards users from CSRF attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

baserCMS

Affected Vendors

Basercms

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/svd-Wz
https://www.cve.org/CVERecord?id=CVE-2023-43649
https://nvd.nist.gov/vuln/detail/CVE-2023-43649

Back to Vulnerability Database