Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-jby7-s5ez-dqb3
Vulnerability ID VCID-jby7-s5ez-dqb3
Aliases CVE-2023-43649
GHSA-fw9x-cqjq-7jx5
Summary Cross-Site Request Forgery (CSRF) in baserproject/basercms.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2023-43649
cvssv3.1 4.7 https://basercms.net/security/JVN_99052047
cvssv3.1 4.7 https://basercms.net/security/JVN_99052047
generic_textual MODERATE https://basercms.net/security/JVN_99052047
ssvc Track https://basercms.net/security/JVN_99052047
cvssv3.1 4.7 https://github.com/baserproject/basercms
generic_textual MODERATE https://github.com/baserproject/basercms
cvssv3.1 4.7 https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
cvssv3.1 4.7 https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
generic_textual MODERATE https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
ssvc Track https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
cvssv3.1 4.7 https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
cvssv3.1 4.7 https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
generic_textual MODERATE https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
ssvc Track https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
cvssv3.1 4.7 https://nvd.nist.gov/vuln/detail/CVE-2023-43649
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2023-43649
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-43649
https://basercms.net/security/JVN_99052047
https://github.com/baserproject/basercms
https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
https://nvd.nist.gov/vuln/detail/CVE-2023-43649
GHSA-fw9x-cqjq-7jx5 https://github.com/advisories/GHSA-fw9x-cqjq-7jx5
GHSA-fw9x-cqjq-7jx5 https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://basercms.net/security/JVN_99052047
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://basercms.net/security/JVN_99052047
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:21:18Z/ Found at https://basercms.net/security/JVN_99052047
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/baserproject/basercms
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:21:18Z/ Found at https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:21:18Z/ Found at https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2023-43649
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.3025
EPSS Score 0.00118
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-02T04:46:13.466924+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/baserproject/basercms/CVE-2023-43649.yml 38.6.0