GHSA-673x-f5wx-fxpw

Suggest an improvement
Source
https://github.com/advisories/GHSA-673x-f5wx-fxpw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-673x-f5wx-fxpw/GHSA-673x-f5wx-fxpw.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-673x-f5wx-fxpw
Aliases
Published
2020-08-28T21:45:15Z
Modified
2026-09-10T03:48:30Z
Severity
  • 7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Cross Site Scripting and RCE in baserCMS
Details

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE).

  • Impact: XSS to RCE via Arbitrary file upload.
  • Attack vector is: Administrator must be logged in.
  • Components are: ThemeFilesController.php, UploaderFilesController.php.
  • Tested baserCMS Version : 4.3.6 (Latest)
  • Affected baserCMS Version : 4.2.0 ~ 4.3.6 (XSS), 3.0.10 ~ 4.3.6 (RCE)
  • Patches : https://basercms.net/security/20200827

Found by Vulnerability Research team in Flatt Security Inc.

Database specific 
{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-08-28T21:44:58Z",
    "nvd_published_at":  null,
    "severity":  "LOW"
}
References

Affected packages

Packagist / baserproject/basercms

Package

Name
baserproject/basercms
Purl
pkg:composer/baserproject/basercms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Fixed
4.3.7

Affected versions

4.*
4.0.0
4.0.1
4.0.2
4.0.2.1
4.0.3
4.0.4
4.0.5
4.0.5.1
4.0.5.2
4.0.6
4.0.7
4.0.8
4.0.9
4.0.10
4.0.10.1
4.0.11
4.1.0
4.1.0.1
4.1.1
4.1.2
4.1.3
4.1.4
4.1.5
4.1.6
4.1.7
4.1.8
4.2.0
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6

Database specific

last_known_affected_version_range 
"<= 4.3.6"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-673x-f5wx-fxpw/GHSA-673x-f5wx-fxpw.json"