CVE-2026-114623 baserproject CVE debrief

Who should care

System administrators and developers using baserCMS versions 5.0.0-5.3.1 or 5.4.0-5.4.1, especially those with publicly accessible admin screens, should assess exposure and prioritize remediation.

Why it matters

This path traversal vulnerability in baserCMS allows an authenticated user to disclose files, potentially exposing sensitive information. System administrators and developers should assess exposure and prioritize remediation.

• Potential disclosure of application source code and configuration files
• Possible exposure of database credentials in certain deployments
• Risk of unauthorized access to sensitive files through the admin screen

Technical summary

The BcThemeFile plugin in baserCMS versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2 has a path traversal vulnerability in the Admin web screen. An authenticated user with theme-file view permission can traverse outside the theme directory and disclose file contents. The vulnerability arises from the ThemeFilesController::parseArgs() method constructing a path containing literal ../ segments, which are not normalized before being passed to ThemeFilesService::get(). The view and edit actions then expose the file contents in a form textarea. Readable files are limited to .php, .css, .js, and .ctp files, which can include application source code and configuration files, potentially disclosing database credentials

Defensive priority

Medium priority for systems using baserCMS versions 5.0.0-5.3.1 or 5.4.0-5.4.1, especially those with publicly accessible admin screens.

Recommended defensive actions

• Review and update baserCMS to version 5.3.2 or 5.4.2, or apply patches
• Restrict access to the BcThemeFile admin screen to authorized users only
• Monitor for suspicious activity on the admin screen and file system
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide details on the path traversal vulnerability in baserCMS. The NVD entry is currently UNCHANGED. The vulnerability was disclosed through the CVE Program and NVD, with additional information from supplemental sources. The evidence is grounded in official records, but the scope of affected deployments and specific exposure details are not provided. Defenders should verify the presence of affected versions in their environments and review official advisories for remediation guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.