high7.6
CVE-2020-15159
Cross Site Scripting and RCE in baserCMS
Impact
baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). * Impact: XSS to RCE via Arbitrary file upload. * Attack vector is: Administrator must be logged in. * Components are: ThemeFilesController.php, UploaderFilesController.php. * Tested baserCMS Version : 4.3.6 (Latest) * Affected baserCMS Version : 4.2.0 ~ 4.3.6 (XSS), 3.0.10 ~ 4.3.6 (RCE) * Patches : https://basercms.net/security/20200827 Found by Vulnerability Research team in [Flatt Security Inc.](https://flatt.tech/)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | >= 4.0.0, <= 4.3.6 | 4.3.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | through 4.3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://basercms.net/security/20200827
- https://github.com/baserproject/basercms/commit/16a7b3cd09a0ca355474119c76897eac2034a66d
- https://github.com/baserproject/basercms/security/advisories/GHSA-673x-f5wx-fxpw
- https://github.com/advisories/GHSA-673x-f5wx-fxpw
- https://nvd.nist.gov/vuln/detail/CVE-2020-15159