GHSA-673x-f5wx-fxpw

Suggest an improvement
Source
https://github.com/advisories/GHSA-673x-f5wx-fxpw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-673x-f5wx-fxpw/GHSA-673x-f5wx-fxpw.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-673x-f5wx-fxpw
Aliases
Published
2020-08-28T21:45:15Z
Modified
2023-11-01T04:51:58.490535Z
Severity
  • 7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Cross Site Scripting and RCE in baserCMS
Details

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE).

  • Impact: XSS to RCE via Arbitrary file upload.
  • Attack vector is: Administrator must be logged in.
  • Components are: ThemeFilesController.php, UploaderFilesController.php.
  • Tested baserCMS Version : 4.3.6 (Latest)
  • Affected baserCMS Version : 4.2.0 ~ 4.3.6 (XSS), 3.0.10 ~ 4.3.6 (RCE)
  • Patches : https://basercms.net/security/20200827

Found by Vulnerability Research team in Flatt Security Inc.

Database specific
{
    "nvd_published_at": null,
    "github_reviewed_at": "2020-08-28T21:44:58Z",
    "severity": "LOW",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-79"
    ]
}
References

Affected packages

Packagist / baserproject/basercms

Package

Name
baserproject/basercms
Purl
pkg:composer/baserproject/basercms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Fixed
4.3.7

Database specific

{
    "last_known_affected_version_range": "<= 4.3.6"
}