Description
Mura/Masa CMS has a Remote Code Execution (RCE) vulnerability. This vulnerability allows unauthenticated attackers to execute arbitrary code due to the insecure evaluation of the "method" parameter, thereby compromising the system.
Remediation
Upgrade to the latest version of Mura CMS or Masa CMS
References
Related Vulnerabilities
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-6662)
IBM WebSEAL Incorrect Authorization Vulnerability (CVE-2023-38368)
RCE in Ivanti Connect Secure and Policy Secure (CVE-2024-21887)
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-14641)
Oracle HTTP Server CVE-2020-2545 Vulnerability (CVE-2020-2545)