Cross Site Request Forgery in Mingsoft MCMS

高危 8.8CVE-2022-27340 · GHSA-g94p-h263-c26q · Published 22/04/2022 · updated 17/06/2026

要点

CVE-2022-27340 是影响 net.mingsoft:ms-mcms, mcms (mingsoft) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.67%，高于 51.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
net.mingsoft:ms-mcms Maven	`≤ 5.2.7`	No fix yet
mcms mingsoft	`= 5.2.7`	No fix yet

Description

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

NVD description

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

References

nvd.nist.gov/vuln/detail/CVE-2022-27340 · ADVISORY
UDKI11/vul · WEB
ming-soft/MCMS · PACKAGE

net.mingsoft:ms-mcms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

net.mingsoft:ms-mcms

Maven

≤ 5.2.7

No fix yet

mcms

mingsoft

= 5.2.7

No fix yet

Description

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

NVD description

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

net.mingsoft:ms-mcms 的其他漏洞

查看全部 →