Description
An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code.
Remediation
References
https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/
Related Vulnerabilities
CVE-2022-39381 Vulnerability in npm package hummus
CVE-2021-21627 Vulnerability in maven package org.jenkins-ci.plugins:libvirt-slave
CVE-2023-49093 Vulnerability in maven package org.htmlunit:htmlunit
CVE-2023-45884 Vulnerability in npm package openmct
CVE-2019-10773 Vulnerability in maven package org.webjars.npm:yarn