NetSight
high8.1

CVE-2021-46037

Path traversal in MCMS

Impact

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.

Affected packages

EcosystemPackageAffectedFixed in
mavennet.mingsoft:ms-mcms<= 5.2.4none recorded

Affected products

VendorProductAffected versions
MingsoftMcms
Version 5.2.4

Weakness classification

References