Description
MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.
Remediation
References
https://github.com/ming-soft/MCMS/issues/59
Related Vulnerabilities
CVE-2022-34112 Vulnerability in maven package io.dataease:dataease-plugin-common
CVE-2022-31103 Vulnerability in npm package lettersanitizer
CVE-2021-41038 Vulnerability in npm package @theia/plugin-ext
CVE-2022-24948 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2021-44228 Vulnerability in maven package org.apache.logging.log4j:log4j-core