GHSA-7hjp-97g3-rq93HighCVSS 7.5

Path Traversal in minsoft:ms-mcms

Published
November 1, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-18831 →

📋 Description

An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.

🎯 Affected products1

  • maven/net.mingsoft:ms-mcms:<= 4.6.5

🔗 References (3)