Description
An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code.
Remediation
References
https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/
Related Vulnerabilities
CVE-2021-26118 Vulnerability in maven package org.apache.activemq:artemis-openwire-protocol
CVE-2021-31805 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2023-40809 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2020-7610 Vulnerability in npm package bson
CVE-2020-19698 Vulnerability in maven package org.webjars.npm:editor.md