~ / search / GHSA-gc79-gh4f-9g6w

GHSA-gc79-gh4f-9g6w

Server Side Template Injection in MCMS

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-46063

Packages

EcosystemPackageAffectedFixed in
Maven net.mingsoft:ms-mcms <= 5.2.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.

References

External links from the advisory. They lead to third-party sites.