What is GHSA-gc79-gh4f-9g6w?

GHSA-gc79-gh4f-9g6w is a security advisory published by GitHub Security Advisories with Critical severity. Server Side Template Injection in MCMS

Which CVE IDs does GHSA-gc79-gh4f-9g6w cover?

GHSA-gc79-gh4f-9g6w covers the following CVE IDs: CVE-2021-46063. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gc79-gh4f-9g6w?

GHSA-gc79-gh4f-9g6w has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-gc79-gh4f-9g6w?

GHSA-gc79-gh4f-9g6w affects 1 product, including: maven/net.mingsoft:ms-mcms:\u003c= 5.2.5.

GHSA-gc79-gh4f-9g6wCriticalCVSS 9.1

Server Side Template Injection in MCMS

Vendor

GitHub Security Advisories

Published

February 19, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2021-46063 →

📋 Description

MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.

🎯 Affected products1

maven/net.mingsoft:ms-mcms:<= 5.2.5

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-46063
https://github.com/ming-soft/MCMS/issues/59
https://github.com/advisories/GHSA-gc79-gh4f-9g6w