CVE-2021-41243

    Dashboard / Vulnerabilities / CVE-2021-41243

    CVE-2021-41243

    Published: 26 Nov 2021Last Modified: 9 Jul 2026

    Summary:

    Details: There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files may upload crafted zip files which may execute arbitrary commands on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

    References: https://github.com/baserproject/basercms/security/advisories/GHSA-7rpc-9m88-cf9w, https://github.com/baserproject/basercms/commit/9088b99c329d1faff3a2f1269f37b9a9d8d5f6ff

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c995123770181b8e6b95dec2ff44dc2d63fab3f1

    Affected versions

    4.5.3
    4.5.2
    4.5.1
    4.5.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-41243 | CVE-DB