CVE-2021-41243

CRITICAL9.1EPSS 2.8%

OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS

Published: 12/1/2021Modified: 3/13/2026

Description

There is an OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.5.3 and earlier versions Vulnerability OS Command Injection Vulnerability. Countermeasures Update to the latest version of baserCMS Credits Akagi Yusuke @NTT-ME

Affected packages (1)

Packagist/baserproject/basercmsfrom 0, < 4.5.4

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.1	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

References (4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-41243
PATCHhttps://github.com/baserproject/basercms
WEBhttps://github.com/baserproject/basercms/commit/9088b99c329d1faff3a2f1269f37b9a9d8d5f6ff
WEBhttps://github.com/baserproject/basercms/security/advisories/GHSA-7rpc-9m88-cf9w