~ / search / GHSA-6xj9-hpq3-w3qw

GHSA-6xj9-hpq3-w3qw

Code injection in MCMS

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-30506

Packages

EcosystemPackageAffectedFixed in
Maven net.mingsoft:ms-mcms <= 5.2.7 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

References

External links from the advisory. They lead to third-party sites.