High · 7.1 CVE-2021-46062 EUVD-2022-1179GHSA-rpvr-mw7r-25xx

MCMS Arbitrary File Deletion vulnerability

Published Feb 18, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.

Ecosystem	Package	Affected	Fixed	Record
Maven	net.mingsoft:ms-basic	< 2.1.16	2.1.16	GHSA-rpvr-mw7r-25xx
Maven	net.mingsoft:ms-mcms	< 5.2.11	5.2.11	GHSA-rpvr-mw7r-25xx