MCMS vulnerable to arbitrary code execution via crafted thumbnail

高危 8.8CVE-2020-22755 · GHSA-293v-5329-36wp · Published 08/05/2023 · updated 17/06/2026

要点

CVE-2020-22755 是影响 net.mingsoft:ms-mcms, mcms (mingsoft) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.92%，高于 60.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
net.mingsoft:ms-mcms Maven	`≤ 5.0.0`	No fix yet
mcms mingsoft	`= 5.0`	No fix yet

Description

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

NVD description

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

References

nvd.nist.gov/vuln/detail/CVE-2020-22755 · ADVISORY
ming-soft/MCMS · WEB
ming-soft/MCMS · PACKAGE

net.mingsoft:ms-mcms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

net.mingsoft:ms-mcms

Maven

≤ 5.0.0

No fix yet

mcms

mingsoft

= 5.0

No fix yet

Description

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

NVD description

File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.

net.mingsoft:ms-mcms 的其他漏洞

查看全部 →