Information from baserCMS Users Community
Vulnerability ID:JVN#21754394
Title:baserCMS plugin "BcAddonMigrator" vulnerable to inclusion of functionality from untrusted control sphere
Status:Vulnerable
This is a statement from the vendor itself with no modification by JPCERT/CC.
The "Add-on Migrator" plugin for baserCMS contains a vulnerability that allows functionality to be incorporated into baserCMS from an untrusted control area.
### Target
BcAddonMigrator 5.2.0 and earlier versions
### Vulnerability
An attacker logged in with administrator privileges could potentially read or delete arbitrary files on the system.
### Countermeasures
Update BcAddonMigrator to the latest version, or disable the plugin if it is not in use.
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_21754394
### Credits
Kuniyoshi Noguchi@Mitsui Bussan Secure Directions, Inc.
