baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0571.json"