Description
MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.
Remediation
References
https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/
Related Vulnerabilities
CVE-2021-4245 Vulnerability in npm package rfc6902
CVE-2022-39249 Vulnerability in npm package matrix-js-sdk
CVE-2023-49145 Vulnerability in maven package org.apache.nifi:nifi-jolt-transform-json-ui
CVE-2021-23356 Vulnerability in npm package kill-process-by-name
CVE-2019-9827 Vulnerability in maven package io.hawt:hawtio-system