En resumen
- CVE-2021-46386 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a net.mingsoft:ms-mcms, mcms (mingsoft).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.1%, mayor que el 87.8% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Mingsoft MCMS is a Java CMS. Versions prior to and including 5.2.5 contain a file upload vulnerability allowing for a jspx webshell to be uploaded via net.mingsoft.basic.action.web.FileAction#upload, resulting in remote code execution. It is unclear if this issue has been patched.
NVD description
File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.
Más vulnerabilidades de net.mingsoft:ms-mcms
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free