CVE-2022-47042

Arbitrary file write in net.mingsoft:ms-mcms in maven/net.mingsoft/ms-mcms

Identifiers

GHSA-65v6-3c9m-hmrp, CVE-2022-47042

Package Slug

maven/net.mingsoft/ms-mcms

Vulnerability

Arbitrary file write in net.mingsoft:ms-mcms

Description

MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.

Affected Versions

All versions up to 5.2.10

Solution

Upgrade to version 5.2.11 or above.

Last Modified

2023-01-27

source