OS Command Injection in baserCMS

ALTO 7.2CVE-2021-20682 · GHSA-g39q-f4rm-85x4 · Published 26/03/2021 · updated 17/06/2026

In breve

CVE-2021-20682 è una vulnerabilità ALTO (CVSS 7.2) che riguarda baserproject/basercms, basercms (basercms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.6% delle vulnerabilità.
Correzione: aggiornare a 4.4.5 o successiva.

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`< 4.4.5`	`4.4.5`
basercms basercms	`< 4.4.5`	`4.4.5`

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2021-20682 · ADVISORY
basercms.net/security/JVN64869876 · WEB
jvn.jp/en/jp/JVN64869876/index.html · WEB

Altre vulnerabilità di baserproject/basercms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

< 4.4.5

4.4.5

basercms

< 4.4.5

4.4.5

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

Altre vulnerabilità di baserproject/basercms

Vedi tutto →