Basecamp vulnerabilities

Products

• Trix 8
• Google Sign In 2

Newest

• basecamp once-campfire Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard CVE-2026-100355 3.1 LowOctober 30, 2026
• basecamp trix Trix: Stored XSS via HTMLParser attribute injection on paste CVE-2026-73428 Fix available 4.6 MediumJuly 24, 2026
• basecamp trix Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController) CVE-2026-73427 Fix available 2.1 LowMarch 29, 2026
• basecamp trix Trix: Stored XSS vulnerability through serialized attributes CVE-2026-73426 Fix available 4.6 MediumMarch 12, 2026
• basecamp google sign in Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI CVE-2025-58067 Fix available 4.2 MediumAugust 29, 2025
• basecamp google sign in Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL CVE-2025-57821 Fix available 4.2 MediumAugust 27, 2025
• basecamp trix Trix vulnerable to Cross-site Scripting on copy & paste CVE-2025-46812 Fix available 2.0 LowMay 8, 2025
• basecamp trix Trix allows Cross-site Scripting via `javascript:` url in a link CVE-2025-21610 Fix available 5.3 MediumJanuary 3, 2025
• basecamp trix Trix vulnerable to Cross-site Scripting on copy & paste CVE-2024-53847 Fix available 5.1 MediumDecember 9, 2024
• basecamp trix Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste CVE-2024-43368 Fix available 6.5 MediumAugust 14, 2024
• basecamp trix The Trix Editor Contains an Arbitrary Code Execution Vulnerability CVE-2024-34341 Fix available 5.4 MediumMay 7, 2024
• basecamp Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for... CVE-2023-36612 7.5 HighJune 25, 2023
• basecamp easymon Cross Site Scripting (XSS) vulnerability in easymon CVE-2018-1000855 Fix available 6.1 MediumDecember 20, 2018