baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)

高 7.2CVE-2025-32957 · GHSA-hv78-cwp4-8r7r · 31/03/2026 公開 · 17/06/2026 更新

要点

CVE-2025-32957 は baserproject/basercms, basercms (basercms) に影響する深刻度「高」 (CVSS 7.2) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.59%（全脆弱性の 48.1% より高い）。
対処：5.2.3 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
baserproject/basercms Packagist	`< 5.2.3`	`5.2.3`
basercms basercms	`< 5.2.3`	`5.2.3`

概要

Details

The application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using require_once without validating or restricting the filename. An attacker can craft a malicious PHP file within the zip and achieve arbitrary code execution when it is included.

Vector: Malicious ZIP upload + insecure require_once

PoC

Restore backup
Load file shell (insecure require_once)

Impact

Remote Code Execution (RCE)

NVD の説明

baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using require_once without validating or restricting the filename. An attacker can craft a malicious PHP file within the zip and achieve arbitrary code execution when it is included. This issue has been patched in version 5.2.3.