p PatchFirst

CVE-2020-15277

CVE-2020-15277 · Remote Code Execution in baserCMS

This page contains facts from public vulnerability sources. Check the original advisory before updating.

baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1.

CVSS 7.2 · High · EPSS 2.3% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • basercms

    Versions
    • >= 4.0.0, < 4.4.1: Affected

    No fix published

  • baserproject/basercms Packagist

    Versions
    • 4.4.0
    Affected ranges
    • ECOSYSTEM: ≥ 4.4.0, < 4.4.1

    Update to 4.4.1

Original sources

Check your server →