Description
A weakness has been identified in mingSoft MCMS up to 5.5.0. This issue affects the function catchImage of the file net/mingsoft/cms/action/BaseAction.java of the component Editor Endpoint. Executing a manipulation of the argument catchimage can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mingSoft | MCMS | 5.0, 5.1, 5.2, 5.3, 5.4, 5.5.0 | — |
References
- VDB-353831 | mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery vdb-entry technical-description
- VDB-353831 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #777516 | mingSoft MCMS 5.5.0 Server-Side Request Forgery third-party-advisory
- https://github.com/wing3e/public_exp/issues/3 exploit issue-tracking