~ / search / GHSA-65v6-3c9m-hmrp

GHSA-65v6-3c9m-hmrp

Arbitrary file write in net.mingsoft:ms-mcms

Source: GitHub Advisory Database (reviewed) High CVE-2022-47042

Packages

EcosystemPackageAffectedFixed in
Maven net.mingsoft:ms-mcms < 5.2.11 5.2.11

Details

As written in the advisory (Markdown source, shown as plain text).

MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.

References

External links from the advisory. They lead to third-party sites.