How many CVEs have a located fix in baserproject/basercms?

19 published CVEs have a fix traced to functions in baserproject/basercms, touching 33 functions across 69 files.

Which function in baserproject/basercms has been patched by the most CVEs?

control in plugins/baser-core/src/View/Helper/BcAdminFormHelper.php has been changed by 2 CVE fixes, from 2024 to 2024.

How large is a typical CVE fix in baserproject/basercms?

The median fix changes 18 lines. 63% of fixes change 20 lines or fewer, and 26% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

javascript

#281 of 500 repositories

baserproject/basercms

Name: baserproject/basercms: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix February 22, 2024

19

CVE fixes located

Published CVEs

33

Functions patched

Distinct function sites

69

Files patched

Distinct source files

2020–2024

Years covered

By CVE publication date

Overview

19 published CVEs have a fix traced to functions in baserproject/basercms, the earliest published in 2020. Those fixes changed 33 distinct functions across 69 files, in 189 patch hunks.

Among the 500 repositories tracked here, baserproject/basercms ranks #281 by the number of CVEs with a located fix.

Most patched functions

Functions in baserproject/basercms changed by the most CVE fixes.

Most patched files

Files in baserproject/basercms changed by the most CVE fixes.

1lib/Baser/Model/BcAppModel.php2 CVEs · 2 functions
2plugins/baser-core/src/View/Helper/BcAdminFormHelper.php2 CVEs · 1 functions
3app/webroot/theme/admin-third/Users/admin/form.php2 CVEs · 0 functions
4lib/Baser/Config/setting.php2 CVEs · 0 functions
5lib/Baser/View/Users/admin/form.php2 CVEs · 0 functions
6lib/Baser/Controller/ToolsController.php1 CVEs · 6 functions
7lib/Baser/Controller/ThemeFilesController.php1 CVEs · 4 functions
8lib/Baser/Controller/ThemesController.php1 CVEs · 3 functions
9lib/Baser/Lib/BcZip.php1 CVEs · 3 functions
10app/webroot/theme/admin-third/js/admin/libs/jquery.bcTree.js1 CVEs · 2 functions

Fix size

How much code a CVE fix in baserproject/basercms changes, with backports counted once.

18

Median lines changed

Added plus removed, per CVE

63%

Fixes of 20 lines or fewer

Share of CVE fixes

26%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in baserproject/basercms, and the functions each fix changed.

baserCMS Cross-site Scripting vulnerability in Content Management
CVE-2024-26128control
Medium · CVSS 5.4
EPSS 0.6%2024-02-22
baserCMS OS command injection vulnerability in Installer
CVE-2023-51450control
High · CVSS 8.1
EPSS 1.5%2024-02-22
baserCMS Cross-site Scripting vulnerability in Site search Feature
CVE-2023-44379
Medium · CVSS 6.1
EPSS 0.5%2024-02-22
baserCMS CSRF vulnerability in Content preview Feature
CVE-2023-43649setupFront
Critical · CVSS 9.8
EPSS 0.3%2023-10-30
baserCMS Directory Traversal vulnerability in Form submission data management Feature
CVE-2023-43648admin_attachment
Medium · CVSS 6.5
EPSS 1.0%2023-10-30
baserCMS Cross-site Scripting vulnerability in File upload Feature
CVE-2023-43647fileLink toDisplayString
Medium · CVSS 6.1
EPSS 0.5%2023-10-30
basercms XSS Vulnerability via Favorites Feature
CVE-2023-29009
Medium · CVSS 6.1
EPSS 0.5%2023-10-27
baserCMS allows any file to be uploaded
CVE-2023-25655getFileUploader afterValidate
Critical · CVSS 9.8
EPSS 1.1%2023-03-23
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
CVE-2023-25654fileExt
Critical · CVSS 9.8
EPSS 1.5%2023-03-23
Cross-site scripting vulnerability in BaserCMS
CVE-2022-39325
Medium · CVSS 6.1
EPSS 0.6%2022-11-25
OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS
CVE-2021-41243create admin_download admin_write_schema
Critical · CVSS 9.1
EPSS 2.2%2021-11-26
Cross-site scripting vulnerability in file upload
CVE-2021-39136
High · CVSS 8.7
EPSS 0.9%2021-08-25

Get an alert for each new baserproject/basercms CVE, with the patched functions and AI-written analysis.

Monitor basercms CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

1Panel-dev/MaxKB19 CVEs alextselegidis/easyappointments19 CVEs bookstackapp/bookstack19 CVEs cloudfoundry/uaa19 CVEs debian/dovecot19 CVEs debian/nginx19 CVEs debian/openimageio19 CVEs denoland/deno19 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in baserproject/basercms.

How many CVEs have a located fix in baserproject/basercms?: 19 published CVEs have a fix traced to functions in baserproject/basercms, touching 33 functions across 69 files.
Which function in baserproject/basercms has been patched by the most CVEs?: control in plugins/baser-core/src/View/Helper/BcAdminFormHelper.php has been changed by 2 CVE fixes, from 2024 to 2024.
How large is a typical CVE fix in baserproject/basercms?: The median fix changes 18 lines. 63% of fixes change 20 lines or fewer, and 26% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track baserproject/basercms CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing