PT-2020-14334 · Basercms · Basercms

Aquilao · Published 2020-10-30 · Updated 2020-11-03 · CVE-2020-15277

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.0.0 through 4.4.0

Description The issue allows for Remote Code Execution (RCE) by uploading an executable script file, such as a PHP file, after logging in as a system administrator. The Edit template component is vulnerable. This can also lead to Cross-Site Scripting (XSS) via arbitrary script execution. The attack vector requires an administrator to be logged in.

Recommendations For versions 4.0.0 through 4.4.0, update to version 4.4.1 to resolve the issue. As a temporary workaround, consider restricting access to the Edit template component until the update is applied.

Fix

Unrestricted File Upload

Special Elements Injection

Weakness Enumeration

CWE-434

CWE-74

Related Identifiers

CVE-2020-15277

GHSA-6FMV-Q269-55CW

Affected Products

Basercms

References · 6

• https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw · Patch
• https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b · Patch
• https://basercms.net/security/20201029 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15277 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15277 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6fmv-q269-55cw · Vendor Advisory