CVE-2021-39136

Published: Aug 25, 2021Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.

Affected (1)

Products: Basercms: Basercms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Basercms Basercms	Before 4.5.1

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (8)

http://jvn.jp/en/jp/JVN14134801/index.html

Source: security-advisories@github.com

Third Party Advisory

https://basercms.net/security/JVN_14134801

Source: security-advisories@github.com

Vendor Advisory

https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3

Source: security-advisories@github.com

Third Party Advisory

http://jvn.jp/en/jp/JVN14134801/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://basercms.net/security/JVN_14134801

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.