← Zuruck zu CVEs

CVE-2021-39136

HIGH

8.7

Beschreibung

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.

CVE Details

CVSS v3.1 Bewertung8.7

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionREQUIRED

Veroffentlicht8/25/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

basercms:basercms

Schwachen (CWE)

CWE-79

Referenzen

http://jvn.jp/en/jp/JVN14134801/index.html(security-advisories@github.com)

https://basercms.net/security/JVN_14134801(security-advisories@github.com)

https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc(security-advisories@github.com)

https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3(security-advisories@github.com)

http://jvn.jp/en/jp/JVN14134801/index.html(af854a3a-2127-422b-91ae-364da2661108)

https://basercms.net/security/JVN_14134801(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.