Maven/net.mingsoft:ms-mcms CVE-2021-46386: critical 9.8, EPSS 3.11%
Mingsoft MCMS vulnerable to Remote Code Execution via file upload.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.2.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cwx9-rp4w-4545
- https://nvd.nist.gov/vuln/detail/CVE-2021-46386
- https://gitee.com/mingSoft/MCMS
- https://gitee.com/mingSoft/MCMS/issues/I4R0GW
- https://github.com/ming-soft/MCMS
CVE-2021-46386 · published · modified · JSON