GHSA-8wq7-hhjj-fpqv CVE-2022-22930
RCE in Mingsoft MCMS
- Severity
- 9.8 / 10
- Critical · CVSS 3.1
- Exploit chance (EPSS)
- 23.69%
- Chance of exploitation in the next 30 days. Higher than 97.82% of scored vulnerabilities.
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine
- Fix
5.2.9- Upgrade net.mingsoft:ms-mcms to this version or later
Description
A remote code execution (RCE) vulnerability in the Template Management function of MCMS allows attackers to execute arbitrary code via a crafted payload.
Affected versions
Maven
| Package | Vulnerable | Fixed in |
|---|---|---|
| net.mingsoft:ms-mcms | < 5.2.9 |
5.2.9 |
How to fix
Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.
net.mingsoft:ms-mcms Maven → 5.2.9
- maven
<dependency><groupId>net.mingsoft</groupId><artifactId>ms-mcms</artifactId><version>5.2.9</version></dependency>- gradle
implementation("net.mingsoft:ms-mcms:5.2.9")
Severity breakdown
CVSS 3.1 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Weakness
CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.
How to prevent it
- Architecture and Design: Choose a template engine that offers a sandbox or restricted mode, or at least limits the power of any available expressions, function calls, or commands.
- Implementation: Use the template engine's sandbox or restricted mode, if available.
References
Advisories
Other links
Timeline
- Published
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-r9wp-qq53-qvjx mingSoft MCMS does not properly restrict file uploads | High | Also affects net.mingsoft:ms-mcms |
| GHSA-wvv5-5g6x-hp7j MCMS reflected cross-site scripting (XSS) vulnerability | Medium | Also affects net.mingsoft:ms-mcms |
| GHSA-54wc-49qj-5ghj MCMS vulnerable SQL injection via the content_title parameter | Critical | Also affects net.mingsoft:ms-mcms |
| GHSA-3922-2r6r-r4fv MCMS allows arbitrary file uploads in the ueditor component | Critical | Also affects net.mingsoft:ms-mcms |
| GHSA-7qw4-9r68-2rmx mingSoft MCMS File Upload vulnerability | High | Also affects net.mingsoft:ms-mcms |
| GHSA-h57w-vh34-f8cw Code injection in mingSoft MCMS | High | Also affects net.mingsoft:ms-mcms |
| GHSA-3vvh-8c65-32j4 Mingsoft MCMS SQL injection | Critical | Also affects net.mingsoft:ms-mcms |
| GHSA-rxvj-5mv6-j5mc Cross-site Scripting in Mingsoft MCMS | Medium | Also affects net.mingsoft:ms-mcms |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor