GHSA-293v-5329-36wp
MCMS vulnerable to arbitrary code execution via crafted thumbnail
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | <= 5.0.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
References
External links from the advisory. They lead to third-party sites.