BaserCMS privilege escallation

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

GHSA-6WR6-54MW-MVHR BaserCMS privilege escallation

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

GHSA-V9GF-98VR-MGP2 baserCMS Access Control Bypass

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request...

baserCMS Access Control Bypass

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request...

GHSA-7RPC-9M88-CF9W OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS

There is an OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS

There is an OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

GHSA-4X2F-54WR-4HJG Potential Zip Slip Vulnerability in baserCMS

There is a OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

Potential Zip Slip Vulnerability in baserCMS

There is a OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

baserCMS OS Command Injection Vulnerability

baserCMS is an enterprise content management system CMS from the baserCMS Basercms team. baserCMS's management system is vulnerable to operating system command injection, which could be exploited by an attacker with upload file privileges to upload crafted zip files that could execute arbitrary...

BaserCMS path traversal vulnerability

baserCMS is an enterprise content management system CMS from the baserCMS Basercms team. baserCMS is vulnerable to a path traversal vulnerability that allows an attacker with upload privileges to upload a crafted zip file capable of path traversal on the host operating system...

OS Command Injection

baserproject/basercms is vulnerable to OS command injection. An attacker can upload malicious zip files through the upload functionality in the library, leading to the path traversal on the host operating system...

CVE-2021-41243

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files may upload crafted zip files which may execute arbitrary commands on the host operating system. This is a vulnerability that needs to be...

CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

CVE-2021-41243

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files may upload crafted zip files which may execute arbitrary commands on the host operating system. This is a vulnerability that needs to be...

CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

Command injection

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files may upload crafted zip files which may execute arbitrary commands on the host operating system. This is a vulnerability that needs to be...

Path traversal

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

CVE-2021-41279

CVE-2021-41279 affects baserCMS; a path traversal vulnerability exists in the upload handling where users with upload privileges can upload crafted zip files to traverse host filesystem. Affected versions prior to the fix allow this, with impact described as path traversal on the host OS. Remedia...

CVE-2021-41279 Zip Slip Vulnerability in BaserCMS

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...