A critical path traversal vulnerability in baserCMS versions prior to 5.2.3 allows authenticated administrators to achieve remote code execution through arbitrary file writes.

A path traversal flaw exists within the theme file management API endpoint at /baser/api/admin/bc-theme-file/theme_files/add.json. An authenticated administrator can manipulate the path parameter with directory traversal sequences to write malicious PHP files outside the intended theme directory.

The ability to write arbitrary files to the server environment presents a severe risk to organizational integrity and data security. By injecting malicious scripts, an attacker with administrative access can achieve remote code execution, leading to complete system compromise, unauthorized data exfiltration, or the deployment of ransomware. Given the CVSS score of 7.2, this vulnerability represents a significant high-severity threat that necessitates immediate remediation.

Immediate Action: Update the baserCMS installation to version 5.2.3 or later to apply the necessary path validation fixes.

Proactive Monitoring: Review administrative access logs for suspicious API requests targeting the theme file management endpoint, specifically looking for directory traversal patterns such as ../ sequences.

Compensating Controls: Implement strict Web Application Firewall (WAF) rules to inspect and filter API requests to the /baser/api/admin/bc-theme-file/ endpoints to block path traversal attempts.

Public Exploit Available: No (the enrichment data indicates no public exploit or proof of concept is available).

This vulnerability poses a clear risk of full system compromise for organizations utilizing baserCMS. Administrators must treat this as a high-priority update. Ensure that the patch to version 5.2.3 is applied across all instances immediately, and review internal administrative access policies to ensure that only authorized personnel have access to sensitive API endpoints.