En bref
- CVE-2021-46386 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant net.mingsoft:ms-mcms, mcms (mingsoft).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.1%, plus élevée que 87.8% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
Mingsoft MCMS is a Java CMS. Versions prior to and including 5.2.5 contain a file upload vulnerability allowing for a jspx webshell to be uploaded via net.mingsoft.basic.action.web.FileAction#upload, resulting in remote code execution. It is unclear if this issue has been patched.
NVD description
File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.
Autres vulnérabilités de net.mingsoft:ms-mcms
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free