Arbitrary File Deletion Vulnerability in MCMS by Ming Soft
CVE-2021-46062

7.1HIGH

Key Information:

Vendor

Mingsoft

Status
Mcms
Vendor
CVE Published:
18 February 2022

What is CVE-2021-46062?

MCMS version 5.2.5 contains a vulnerability that allows an attacker to delete arbitrary files via the 'oldFileName' component. This weakness can be exploited if an attacker manipulates the input to gain unauthorized access to the file system. Users of this version are advised to implement security measures to protect against potential exploitation.

References

https://github.com/ming-soft/MCMS/issues/59
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.