CVE-2021-41243

CVE-2021-41243 affects baserCMS management system. Affected: baserCMS ≤ 4.5.3 (and related OSV/GHSA entries). Vulnerability: OS command injection and a Zip Slip-like issue where an uploaded crafted ZIP by users with file-upload privileges can cause arbitrary commands to run on the host; data expo...

JVN#81376414: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2021-41243 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2| AV:N/AC:L/Au:S/C:C/I:C/A:C| Base Score: 9.0...