← Retour aux CVEs

CVE-2021-39136

HIGH

8.7

Description

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.

Details CVE

Score CVSS v3.18.7

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie8/25/2021

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

basercms:basercms

Faiblesses (CWE)

CWE-79

References

http://jvn.jp/en/jp/JVN14134801/index.html(security-advisories@github.com)

https://basercms.net/security/JVN_14134801(security-advisories@github.com)

https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc(security-advisories@github.com)

https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3(security-advisories@github.com)

http://jvn.jp/en/jp/JVN14134801/index.html(af854a3a-2127-422b-91ae-364da2661108)

https://basercms.net/security/JVN_14134801(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.