Description
An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | <= 5.2.4 | — | GHSA-h57w-vh34-f8cw |