HIGH8.8

GHSA-6j3p-vrph-j7qq

OS Command Injection in baserCMS

Details

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms

Introduced in: 4.0.0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

Packagist/baserproject/basercms

Introduced in: 0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2018-0569[ADVISORY]
https://basercms.net/security/JVN67881316[WEB]
https://github.com/baserproject/basercms[PACKAGE]
http://jvn.jp/en/jp/JVN67881316/index.html[WEB]