Lucene search

K
osvGoogleOSV:GHSA-X73X-7GMX-W835
HistoryMay 13, 2022 - 1:41 a.m.

Arbitrary file delete in baserCMS

2022-05-1301:41:58
Google
osv.dev
5
basercms
arbitrary file delete
remote attackers
mail form
security vulnerability

EPSS

0.002

Percentile

53.7%

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the “File” field is being used in the mail form.

EPSS

0.002

Percentile

53.7%

Related for OSV:GHSA-X73X-7GMX-W835