Browse all 7 CVE security advisories affecting basecamp. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-58067 | Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI — google_sign_inCWE-601 | 4.2 | Medium | 2025-08-29 |
| CVE-2025-57821 | Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL — google_sign_inCWE-601 | 4.2 | Medium | 2025-08-27 |
| CVE-2025-46812 | Trix vulnerable to Cross-site Scripting on copy & paste — trixCWE-79 | 6.1AI | MediumAI | 2025-05-08 |
| CVE-2025-21610 | Trix allows Cross-site Scripting via `javascript:` url in a link — trixCWE-79 | 5.3 | Medium | 2025-01-03 |
| CVE-2024-53847 | Trix vulnerable to Cross-site Scripting on copy & paste — trixCWE-79 | 6.1 | - | 2024-12-09 |
| CVE-2024-43368 | Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste — trixCWE-79 | 6.5 | Medium | 2024-08-14 |
| CVE-2024-34341 | The Trix Editor Contains an Arbitrary Code Execution Vulnerability — trixCWE-79 | 5.4 | Medium | 2024-05-07 |
This page lists every published CVE security advisory associated with basecamp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.