| Package | Affected versions | Patched versions |
|---|---|---|
| mrcms | = 3.1.2 |
MRCMS 3.1.2 contains an access control vulnerability. The save() method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free