Vulnerabilities in basecamp

10 results

Vexday analysis

Basecamp apresenta 7 vulnerabilidades registradas, predominantemente do tipo XSS (CWE-79), sem incidentes ativos de exploração documentados no KEV. Nenhuma falha crítica ou publicação recente foi identificada, indicando um perfil de risco baixo e estabilizado.

CVE-2024-34341MEDIUMThe Trix Editor Contains an Arbitrary Code Execution VulnerabilityEPSS 0.8%CVE-2025-46812LOWTrix vulnerable to Cross-site Scripting on copy & pasteEPSS 0.7%CVE-2024-43368MEDIUMTrix has a Cross-Site Scripting (XSS) vulnerability on copy & pasteEPSS 0.5%CVE-2024-53847MEDIUMTrix vulnerable to Cross-site Scripting on copy & pasteEPSS 0.5%CVE-2025-21610MEDIUMTrix allows Cross-site Scripting via `javascript:` url in a linkEPSS 0.4%CVE-2026-73427LOWTrix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)EPSS 0.3%CVE-2026-73426MEDIUMTrix: Stored XSS vulnerability through serialized attributesEPSS 0.2%CVE-2025-57821MEDIUMBasecamp's Google Sign-In for Rails allowed redirects to a malformed URLEPSS 0.2%CVE-2025-58067MEDIUMBasecamp's Google Sign-In for Rails allowed redirects to protocol-relative URIEPSS 0.2%CVE-2026-73428MEDIUMTrix: Stored XSS via HTMLParser attribute injection on pasteEPSS 0.2%