CVE-2023-43648

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Oct 30, 2023
Updated: Nov 6, 2023
CWE ID 22

Summary

CVE-2023-43648 is a Directory Traversal Vulnerability affecting baserCMS, a website development framework. The vulnerability exists in the form submission data management feature of baserCMS prior to version 4.8.0. This vulnerability allows an attacker to navigate outside of the intended directory and access sensitive files or directories on the system. The issue has been patched in version 4.8.0, and organizations using an older version should update to mitigate the risk. The vulnerability has a CVSS v3.1 base score of 6.5, indicating a medium severity level and a high impact on confidentiality. It requires low privileges and no user interaction to exploit, making it a potential threat that can be exploited remotely over the network without requiring complex attack techniques.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-43648 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options