CVE-2020-15277: Unrestricted Upload of File with Dangerous Type

October 30, 2020 (updated November 3, 2020)

baserCMS Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component was found to be vulnerable.

References

basercms.net/security/20201029
nvd.nist.gov/vuln/detail/CVE-2020-15277

Code Behaviors & Features

Detect and mitigate CVE-2020-15277 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →