CVE-2017-10843: High severity basercms mail vulnerability
Published Aug 28, 2017
·Updated
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.
Affected Software
2 affected components
baserCMS BaserCMS>=3.0.0<=3.0.14
baserCMS BaserCMS>=4.0.0<=4.0.5
Remediation
Patch Available
Event History
Aug 28, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-10843?
CVE-2017-10843 has a medium severity due to its potential to allow remote file deletion.
2
How do I fix CVE-2017-10843?
To fix CVE-2017-10843, upgrade baserCMS to version 3.0.15 or 4.0.6 or later.
3
What versions of baserCMS are affected by CVE-2017-10843?
baserCMS versions 3.0.14 and earlier, 4.0.5 and earlier are affected by CVE-2017-10843.
4
What kind of attack does CVE-2017-10843 enable?
CVE-2017-10843 enables attackers to remotely delete arbitrary files within the application.
5
Is there a workaround for CVE-2017-10843 until I can upgrade?
There is no documented workaround for CVE-2017-10843, so upgrading is the recommended solution.