Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-86331
HistoryNov 01, 2023 - 12:00 a.m.

BaserCMS path traversal vulnerability (CNVD-2023-86331)

2023-11-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
basercms
path traversal
vulnerability
directory requests
form submission
sensitive information
exploitation

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

35.8%

baserCMS is an enterprise-level content management system (CMS) from the baserCMS team. A path traversal vulnerability exists in versions of baserCMS prior to 4.8.0, which stems from a lack of validity checking of paths when processing directory requests by the form submission data management feature, and can be exploited by an attacker to obtain sensitive information.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

35.8%