Arbitrary File Deletion Vulnerability in MCMS by Lycsha
CVE-2021-46037

8.1HIGH

Key Information:

Vendor

Mingsoft

Status
Mcms
Vendor
CVE Published:
18 February 2022

What is CVE-2021-46037?

MCMS version 5.2.4 is susceptible to an arbitrary file deletion vulnerability, which allows an attacker to manipulate file deletion through the /template/unzip.do component. This flaw can lead to unauthorized access to sensitive files and potential system compromise if exploited. It is crucial for users of this version to apply necessary updates and patches to safeguard their systems against such vulnerabilities.

References

https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.