critical9.8
CVE-2022-22929
Arbitrary File Upload in Mingsoft MCMS
Impact
MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.mingsoft:ms-mcms | <= 5.2.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mingsoft | Mcms | Version 5.2.4 |