CVE-2021-41243: OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS
Summary
CVE-2021-41243: OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS. Affects baserproject/basercms versions < 4.5.4. Fixed in 4.5.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
baserCMS is a management system used by an unspecified number of users. It provides functionality for content management, website creation, and other related tasks. The vulnerability affects baserCMS versions 4.5.3 and earlier.
Vulnerability Detail
The vulnerability in baserCMS is an OS Command Injection Vulnerability. This type of vulnerability allows an attacker to execute arbitrary commands on the underlying operating system. It poses a significant risk as it can lead to unauthorized access, data breaches, and potential compromise of the entire system. The vulnerability has a CVSS score of 9.1, indicating its critical severity.
How To Fix
Minimum fixed version
4.5.4
This is the first release that contains the fix.
composer require baserproject/basercms:4.5.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The OS Command Injection Vulnerability in baserCMS poses a critical risk to the security and integrity of the system. It is recommended to update to the latest version (4.5.4) to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for baserproject/basercms →
FAQ
baserCMS is a management system used for content management and website creation.
An OS Command Injection Vulnerability allows an attacker to execute arbitrary commands on the underlying operating system.
The vulnerability can lead to unauthorized access, data breaches, and potential compromise of the entire system.
The CVSS score of this vulnerability is 9.1, indicating its critical severity.
To fix the vulnerability, update baserCMS to the latest version (4.5.4).
References
Related vulnerabilities
Recent vulnerabilities recorded for baserproject/basercms.
