high8.8
CVE-2020-22755
MCMS vulnerable to arbitrary code execution via crafted thumbnail
Impact
File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.mingsoft:ms-mcms | <= 5.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mingsoft | Mcms | Version 5.0 |