CVE-2021-41279

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.5.3 and earlier

Description The issue affects baserCMS, an open source content management system with a focus on Japanese language support. Users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users.

Recommendations For baserCMS versions 4.5.3 and earlier, update to the latest version of baserCMS as soon as possible. As a temporary workaround, consider restricting upload privileges to minimize the risk of exploitation.