Remote Information Disclosure in mingSoft MCMS Product
CVE-2023-51282

7.5HIGH

Key Information:

Vendor

mingSoft

Status
Mcms
Vendor
CVE Published:
16 January 2024

What is CVE-2023-51282?

An identified vulnerability in mingSoft's MCMS version 5.2.4 enables remote attackers to exploit the system through specially crafted scripts. This exploitation targets the password parameter, allowing unauthorized access to sensitive information. As web applications continue to be primary targets for cyber threats, it is imperative for organizations utilizing this software to assess their security measures and apply necessary patches or mitigation strategies to protect their data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gitee.com/mingSoft/MCMS/issues/I4Q4NV
https://github.com/tanalala/CVE/blob/main/Code.md

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.