Miggo Logo
Miggo Vulnerability Database
→
CVE-2023-25655

CVE-2023-25655: baserCMS allows any file to be uploaded

9.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2023-25655
GHSA ID
GHSA-mfvg-qwcw-qvc8
EPSS Score
0.48627%
CWE
CWE-434
Published
3/23/2023
Updated
3/28/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
baserproject/basercmscomposer< 4.7.54.7.5

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from improper validation handling in the file upload workflow. The commit diff shows critical changes to BcUploadBehavior.afterValidate method - adding validation error checks before processing upload data. Previously, even when validation errors occurred (e.g., invalid file types), the code would still process the upload via setupRequestData and setupTmpData. This bypass allowed dangerous file uploads. The CWE-434 mapping confirms this is an unrestricted file upload vulnerability directly tied to validation logic flaws in upload handling functions.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

T**r* is * vuln*r**ility t**t *llows uplo**in* *ny *il*s to **s*r*MS. T*is is * vuln*r**ility t**t n***s to ** ***r*ss** w**n t** m*n***m*nt syst*m is us** *y *n unsp**i*i** num**r o* us*rs. I* you *r* *li*i*l*, pl**s* up**t* to t** n*w v*rsion *s s

Reasoning

T** vuln*r**ility st*ms *rom improp*r `v*li**tion` **n*lin* in t** *il* uplo** work*low. T** *ommit *i** s*ows *riti**l ***n**s to `**Uplo******vior.**t*rV*li**t*` m*t*o* - ***in* `v*li**tion` *rror ****ks ***or* pro**ssin* uplo** **t*. Pr*viously, *