CVE-2017-10843 Vulnerability Details

  /     /     /  

CVE-2017-10843 Metadata Quick Info

CVE Published: 28/08/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: jpcert | Vendor: baserCMS Users Community | Product: baserCMS
Status : PUBLISHED

---

CVE-2017-10843 Description

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Arbitrary File Deletion
Source: baserCMS Users Community

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).