baserCMS arbitrary file upload vulnerability

2022-05-1403:06:07

Google

osv.dev

0.001 Low

EPSS

Percentile

35.1%

JSON

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.

CPENameOperatorVersion
baserproject/basercmseq3.0.7
baserproject/basercmseq2.0.0
baserproject/basercmseq2.0.0-rc4
baserproject/basercmseq0.0.3
baserproject/basercmseq0.0.1
baserproject/basercmseq3.0.15
baserproject/basercmseq3.0.12
baserproject/basercmseq2.0.0-rc1
baserproject/basercmseq2.0.0-rc2
baserproject/basercmseq3.0.5

Name	Operator	Version
baserproject/basercms	eq	3.0.7
baserproject/basercms	eq	2.0.0
baserproject/basercms	eq	2.0.0-rc4
baserproject/basercms	eq	0.0.3
baserproject/basercms	eq	0.0.1
baserproject/basercms	eq	3.0.15
baserproject/basercms	eq	3.0.12
baserproject/basercms	eq	2.0.0-rc1
baserproject/basercms	eq	2.0.0-rc2
baserproject/basercms	eq	3.0.5