NetSight
critical9.8

CVE-2022-22928

MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.

Impact

MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.

Affected products

VendorProductAffected versions
MingsoftMcms
Version 5.2.4

Weakness classification

References