CVE-2021-46386

2022-01-2600:00:00

mitre

www.cve.org

file upload

mingsoft mcms

remote code execution

crafted jspx webshell

AI Score

9.8

Confidence

High

EPSS

0.007

Percentile

81.3%

JSON

File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.

References

gitee.com/mingSoft/MCMS/issues/I4R0GW