Description
MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | <= 5.2.4 | — | GHSA-73wx-rpj3-mx46 |
High · 8.1
CVE-2021-46037
EUVD-2022-0878GHSA-73wx-rpj3-mx46
Path traversal in MCMS
Published Feb 18, 2022 · Updated Aug 4, 2024 · Assigned by mitre