OS Command Injection in baserCMS

ALTO 7.2CVE-2021-20682 · GHSA-g39q-f4rm-85x4 · Published 26/03/2021 · updated 17/06/2026

En resumen

CVE-2021-20682 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a baserproject/basercms, basercms (basercms).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.6% de las vulnerabilidades.
Solución: actualizar a 4.4.5 o posterior.

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`< 4.4.5`	`4.4.5`
basercms basercms	`< 4.4.5`	`4.4.5`

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2021-20682 · ADVISORY
basercms.net/security/JVN64869876 · WEB
jvn.jp/en/jp/JVN64869876/index.html · WEB

Más vulnerabilidades de baserproject/basercms

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

< 4.4.5

4.4.5

basercms

< 4.4.5

4.4.5

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

Más vulnerabilidades de baserproject/basercms

Ver todo →