Description
An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code.
Remediation
References
https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/
Related Vulnerabilities
CVE-2016-10735 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap
CVE-2014-10065 Vulnerability in maven package org.webjars:remarkable
CVE-2020-15174 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-21290 Vulnerability in maven package io.netty:netty-testsuite
CVE-2023-28709 Vulnerability in maven package org.apache.tomcat:tomcat-catalina