Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

baserproject/basercms

              5.4.x @ 48726f5
            

112

Fixes

CVEs

CRITICAL

Peak severity

41.2%

Coverage

Highlights

Auth Bypass: 43 prior fixes. Scrutinize any change in this area.

lib/Baser/Controller/BcAppController.php: most-fixed (6 issues). Treat as high-risk during review.

81 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Numerous fixes address authorization bypasses through URL normalization, query-string stripping, HTTP-method checks, and admin API prefix enforcement. The high frequency and critical severity indicate a systemic weakness in permission evaluation across different controllers and services.

Path Traversal: Path traversal vulnerabilities are critical and span multiple components, including theme file APIs, upload paths, and zip extraction. Fixes involve basename(), realpath containment, and type allowlists, but the breadth indicates a recurring failure to validate file paths and names.

Reflected XSS: Reflected XSS is widespread across admin views and JavaScript, often due to unescaped output of user-controlled parameters or data. Fixes consistently add h() encoding or .text() instead of .html(), indicating a need for systematic output encoding.