Most recent entries from all

cnvd-2021-92463

EUVD-2026-31629

fkie_cve-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

GHSA-4x2f-54wr-4hjg — Potential Zip Slip Vulnerability in baserCMS

Affected: Packagist: baserproject/basercms

There is a OS Command Injection Vulnerability on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

Target baserCMS 4.5.3 and earlier versions

Vulnerability OS Command Injection Vulnerability.

Countermeasures Update to the latest version of baserCMS

Credits Daniele Scanu @SoterItSecurity

gsd-2021-41279

jvndb-2021-000106

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. * OS command injection (CWE-78) - CVE-2021-41243 * Arbitrary code upload vulnerability in Database restore (CWE-434) - CVE-2021-41279 CVE-2021-41243 Akagi Yusuke of NTT-ME CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-41279 Daniele Scanu of SoterITSecurity reported this vulnerability to baserCMS Users Community and baserCMS Users Community reported it to JPCERT/CC to notify users of the solution through JVN.