Description

An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

Remediation

References

https://gitee.com/mingSoft/MCMS/issues/I56AID

Related Vulnerabilities

CVE-2020-14968 Vulnerability in maven package org.webjars.bower:jsrsasign

CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_2.12

CVE-2021-41189 Vulnerability in maven package org.dspace:dspace-api

CVE-2020-7640 Vulnerability in npm package pixl-class

CVE-2023-26118 Vulnerability in npm package angular

Severity

Critical

Classification

CWE-434 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory