Skip to content

Potential Zip Slip Vulnerability

Low
ryuring published GHSA-4x2f-54wr-4hjg Nov 25, 2021

Package

Simplezip (baserCMS)

Affected versions

<= 4.5.3

Patched versions

4.5.4

Description

There is a OS Command Injection Vulnerability on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users.
If you are eligible, please update to the new version as soon as possible.

Target
baserCMS 4.5.3 and earlier versions

Vulnerability
OS Command Injection Vulnerability.

Countermeasures
Update to the latest version of baserCMS

Credits
Daniele Scanu @SoterITSecurity

Severity

Low

CVE ID

CVE-2021-41279

Weaknesses

No CWEs