Description
MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.
Remediation
References
https://gitee.com/mingSoft/MCMS/issues/I6592F
Related Vulnerabilities
CVE-2019-5448 Vulnerability in npm package yarn
CVE-2021-23371 Vulnerability in npm package chrono-node
CVE-2020-35200 Vulnerability in maven package org.igniterealtime.openfire.plugins:clientcontrol
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-trino
CVE-2023-34602 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core