CSRF Vulnerability in MCMS Product by Vendor
CVE-2022-29647

8.8HIGH

Key Information:

Vendor

Mingsoft

Status
Mcms
Vendor
CVE Published:
2 June 2022

What is CVE-2022-29647?

A CSRF vulnerability was found in MCMS version 5.2.7 that enables attackers to forge requests, resulting in unauthorized access to create an administrator account. This flaw can be exploited by sending specially crafted requests to the vulnerable endpoint ms/basic/manager/save.do, raising serious security concerns for web application integrity.

References

https://gist.github.com/aaaahuia/f708c6c8a320e0f3afbb9247...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.