OS Command Injection in baserCMS

ÉLEVÉE 7.2CVE-2021-20682 · GHSA-g39q-f4rm-85x4 · Published 26/03/2021 · updated 17/06/2026

En bref

CVE-2021-20682 est une vulnérabilité ÉLEVÉE (CVSS 7.2) touchant baserproject/basercms, basercms (basercms).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.5%, plus élevée que 84.6% des vulnérabilités.
Correctif : mettre à jour vers 4.4.5 ou plus récent.

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`< 4.4.5`	`4.4.5`
basercms basercms	`< 4.4.5`	`4.4.5`

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2021-20682 · ADVISORY
basercms.net/security/JVN64869876 · WEB
jvn.jp/en/jp/JVN64869876/index.html · WEB

Autres vulnérabilités de baserproject/basercms

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

< 4.4.5

4.4.5

basercms

< 4.4.5

4.4.5

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

Autres vulnérabilités de baserproject/basercms

Tout voir →