{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.2.4"}],"component":"net.mingsoft:ms-mcms","cve_ids":["CVE-2021-46036"],"ecosystem":"Maven","epss":0.03743,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g8j8-mgh9-q77p","id":"tcs_01M5N8XRHB3MA5657RRY1BD7P8","modified_at":"2024-02-19T05:31:51.391601Z","published_at":"2022-02-19T00:01:25Z","references":["https://osv.dev/vulnerability/GHSA-g8j8-mgh9-q77p","https://nvd.nist.gov/vuln/detail/CVE-2021-46036","https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g8j8-mgh9-q77p","url":"https://osv.dev/vulnerability/GHSA-g8j8-mgh9-q77p"}],"summary":"File upload leading to RCE in MCMS"}