CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

• CWE-22

• https://github.com/baserproject/basercms/commit/d8ab0a81a7bce35cc95ff7dff851a7e87a084336Patch, Third Party Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-4x2f-54wr-4hjgThird Party Advisory
• https://github.com/baserproject/basercms/commit/d8ab0a81a7bce35cc95ff7dff851a7e87a084336Patch, Third Party Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-4x2f-54wr-4hjgThird Party Advisory

Published

Nov 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41273Pterodactyl is an open-source game server management panel b…4.3
• CVE-2021-41274solidus_auth_devise provides authentication services for the…8.8
• CVE-2021-41275spree_auth_devise is an open source library which provides a…8.8
• CVE-2021-41276Tuleap is a Libre and Open Source tool for end to end tracea…7.2
• CVE-2021-41277Metabase is an open source data analytics platform. In affec…7.5
• CVE-2021-41278Functions SDK for EdgeX is meant to provide all the plumbing…5.7
• CVE-2021-4128When transitioning in and out of fullscreen mode, a graphics…6.5
• CVE-2021-41280Sharetribe Go is a source available marketplace software. In…9.8
• CVE-2021-41281Synapse is a package for Matrix homeservers written in Pytho…7.5
• CVE-2021-41282diag_routes.php in pfSense 2.5.2 allows sed data injection. …8.8
• CVE-2021-41285Ballistix MOD Utility through 2.0.2.5 is vulnerable to privi…7.8
• CVE-2021-41286Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-si…7.8