Front-End File Upload Vulnerability in MCMS by MingSoft
CVE-2024-42991

8.1HIGH

Key Information:

Vendor

MingSoft

Status
MCMS
Vendor
CVE Published:
3 September 2024

What is CVE-2024-42991?

The MCMS v5.4.1 software version is susceptible to a front-end file upload vulnerability. This flaw allows attackers to potentially execute remote commands, jeopardizing the integrity and security of the affected systems. It is crucial for users and administrators to implement protective measures to mitigate the risks associated with this vulnerability.

References

https://gitee.com/mingSoft/MCMS/issues/IAHN9F

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.