~ / search / GHSA-8wq7-hhjj-fpqv

GHSA-8wq7-hhjj-fpqv

RCE in Mingsoft MCMS

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-22930

Packages

EcosystemPackageAffectedFixed in
Maven net.mingsoft:ms-mcms < 5.2.9 5.2.9

Details

As written in the advisory (Markdown source, shown as plain text).

A remote code execution (RCE) vulnerability in the Template Management function of MCMS allows attackers to execute arbitrary code via a crafted payload.

References

External links from the advisory. They lead to third-party sites.