high7.5
CVE-2021-46383
Mingsoft MCMS SQL injection vulnerability
Impact
Mingsoft MCMS contains a SQL injection vulnerability relating to the component `net.mingsoft.mdiy.action.web.DictAction#list`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.mingsoft:ms-mcms | <= 5.2.5 | 5.2.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mingsoft | Mcms | through 5.2.5 |