Description
File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
Remediation
References
https://github.com/ming-soft/MCMS
https://github.com/ming-soft/MCMS/issues/42
Related Vulnerabilities
CVE-2021-46708 Vulnerability in maven package org.webjars.npm:swagger-ui
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-beans
CVE-2023-24187 Vulnerability in maven package com.bstek.ureport:ureport2-core
CVE-2018-1000023 Vulnerability in npm package insight-api
CVE-2018-11695 Vulnerability in maven package org.webjars.npm:node-sass