OS Command Injection in baserCMS

ALTO 7.2CVE-2021-20682 · GHSA-g39q-f4rm-85x4 · Published 26/03/2021 · updated 17/06/2026

Em resumo

CVE-2021-20682 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta baserproject/basercms, basercms (basercms).
Chance de exploração nos próximos 30 dias (EPSS): 2.5%, maior que 84.6% das vulnerabilidades.
Correção: atualize para 4.4.5 ou posterior.

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`< 4.4.5`	`4.4.5`
basercms basercms	`< 4.4.5`	`4.4.5`

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2021-20682 · ADVISORY
basercms.net/security/JVN64869876 · WEB
jvn.jp/en/jp/JVN64869876/index.html · WEB

Mais vulnerabilidades de baserproject/basercms

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

< 4.4.5

4.4.5

basercms

< 4.4.5

4.4.5

Description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

NVD description

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

Mais vulnerabilidades de baserproject/basercms

Ver tudo →