Description
baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| baserproject | basercms | >= 4.0.0, < 4.4.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | baserproject/basercms | >= 4.4.0, < 4.4.1 | 4.4.1 | GHSA-6fmv-q269-55cw |