Description
An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code.
Remediation
References
https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/
Related Vulnerabilities
CVE-2022-24278 Vulnerability in npm package convert-svg-core
CVE-2021-44228 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2022-25901 Vulnerability in maven package org.webjars.npm:cookiejar
CVE-2023-26487 Vulnerability in maven package org.webjars.bowergithub.vega:vega
CVE-2022-2218 Vulnerability in maven package org.webjars.npm:parse-url