~ / search / GHSA-7qw4-9r68-2rmx

GHSA-7qw4-9r68-2rmx

mingSoft MCMS File Upload vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-22567

Packages

EcosystemPackageAffectedFixed in
Maven net.mingsoft:ms-mcms <= 5.3.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

References

External links from the advisory. They lead to third-party sites.