Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-41279

Опубликовано: 26 нояб. 2021
Источник: nvd
CVSS3: 7.7
CVSS3: 8.8
CVSS2: 9
EPSS Низкий

Описание

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*
Версия до 4.5.4 (исключая)

EPSS

Процентиль: 63%
0.00438
Низкий

7.7 High

CVSS3

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.7
github
около 4 лет назад

Potential Zip Slip Vulnerability in baserCMS

EPSS

Процентиль: 63%
0.00438
Низкий

7.7 High

CVSS3

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-22