basecamp vulnerabilities
11 published CVEs name basecamp among the affected products.
- 11Published CVEs11 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-100355
Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard
basecamp · once-campfire
Low3.1 - CVE-2026-73426
Trix: Stored XSS vulnerability through serialized attributes
basecamp · trix
Medium4.6 - CVE-2026-73428
Trix: Stored XSS via HTMLParser attribute injection on paste
basecamp · trix
Medium4.6 - CVE-2026-73427
Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)
basecamp · trix
Low2.1 - CVE-2025-58067
Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI
basecamp · google_sign_in
Medium4.2 - CVE-2025-57821
Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL
basecamp · google_sign_in
Medium4.2 - CVE-2025-46812
Trix vulnerable to Cross-site Scripting on copy & paste
basecamp · trix
Low2.0 - CVE-2025-21610
Trix allows Cross-site Scripting via `javascript:` url in a link
basecamp · trix
Medium5.3 - CVE-2024-53847
Trix vulnerable to Cross-site Scripting on copy & paste
basecamp · trix
Medium5.1 - CVE-2024-43368
Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste
basecamp · trix
Medium6.5