GHSA-7hjp-97g3-rq93
Path Traversal in minsoft:ms-mcms
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | <= 4.6.5 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.
References
External links from the advisory. They lead to third-party sites.