VULNERABILITY INTELLIGENCE

CVE-2017-10843

CVSS score7.5 HIGH

EPSS probability1.42%

CISA KEVNot currently listed

Published2017-08-29

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

vultures@jpcert.or.jp — Third Party Advisory, VDB Entry
vultures@jpcert.or.jp — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory