MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered.

Published Feb 2, 2024 · Updated Jun 12, 2025 · Assigned by mitre