net.mingsoft:ms-mcms (Maven)
Advisories
39
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 6.0.2 or later clears every advisory below that has a fix.
Upgrade commands
maven
<dependency><groupId>net.mingsoft</groupId><artifactId>ms-mcms</artifactId><version>6.0.2</version></dependency>gradle
implementation("net.mingsoft:ms-mcms:6.0.2")Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-r9wp-qq53-qvjx mingSoft MCMS does not properly restrict file uploads |
High EPSS 0.41% |
<= 6.1.1 | No fix yet |
| GHSA-wvv5-5g6x-hp7j MCMS reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.20% |
<= 6.0.1 | No fix yet |
| GHSA-54wc-49qj-5ghj MCMS vulnerable SQL injection via the content_title parameter |
Critical EPSS 0.64% |
>= 5.5.0, < 6.0.2 | 6.0.2 |
| GHSA-3922-2r6r-r4fv MCMS allows arbitrary file uploads in the ueditor component |
Critical EPSS 0.79% |
< 5.4.4 | 5.4.4 |
| GHSA-7qw4-9r68-2rmx mingSoft MCMS File Upload vulnerability |
High EPSS 17.79% |
<= 5.3.5 | No fix yet |
| GHSA-h57w-vh34-f8cw Code injection in mingSoft MCMS |
High EPSS 1.12% |
<= 5.2.4 | No fix yet |
| GHSA-3vvh-8c65-32j4 Mingsoft MCMS SQL injection |
Critical EPSS 2.24% |
<= 5.2.9 | No fix yet |
| GHSA-rxvj-5mv6-j5mc Cross-site Scripting in Mingsoft MCMS |
Medium EPSS 1.43% |
< 5.3.2 | 5.3.2 |
| GHSA-293v-5329-36wp MCMS vulnerable to arbitrary code execution via crafted thumbnail |
High EPSS 0.92% |
<= 5.0.0 | No fix yet |
| GHSA-hx8p-9m48-g76r Ming-Soft MCMS vulnerable to SQL injection |
Critical EPSS 1.42% |
< 5.1 | 5.1 |
| GHSA-65v6-3c9m-hmrp Arbitrary file write in net.mingsoft:ms-mcms |
High EPSS 1.03% |
< 5.2.11 | 5.2.11 |
| GHSA-6rvv-h8g7-728w Mingsoft MCMS Cross-site Scripting vulnerability |
Medium EPSS 0.43% |
<= 5.2.9 | No fix yet |
| GHSA-hc5g-xf64-j49j Mingsoft MCMS vulnerable to SQL Injection |
Critical EPSS 3.15% |
< 5.2.10 | 5.2.10 |
| GHSA-p46c-m4j7-mjvq Mingsoft MCMS vulnerable to Cross-site Scripting |
Medium EPSS 0.43% |
<= 5.2.8 | No fix yet |
| GHSA-hmj3-mqgw-2fq6 Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter |
Critical EPSS 1.11% |
<= 5.2.8 | No fix yet |
| GHSA-w3rc-2whg-w934 Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List |
Critical EPSS 1.11% |
<= 5.2.8 | No fix yet |
| GHSA-4828-473v-37gh Unrestricted Upload of File with Dangerous Type in MCMS |
Critical EPSS 1.52% |
No fix yet | |
| GHSA-6xj9-hpq3-w3qw Code injection in MCMS |
Critical EPSS 2.73% |
<= 5.2.7 | No fix yet |
| GHSA-gp39-qj5f-43qv Cross Site Request Forgery in Mingsoft MCMS |
High EPSS 0.66% |
<= 5.2.7 | No fix yet |
| GHSA-m246-pv28-4r6f Mingsoft MCMS CSRF vulnerability |
High EPSS 0.57% |
<= 4.6.5 | No fix yet |
| GHSA-g94p-h263-c26q Cross Site Request Forgery in Mingsoft MCMS |
High EPSS 0.67% |
<= 5.2.7 | No fix yet |
| GHSA-mx3x-rmrh-9wf6 SQL injection in net.mingsoft:ms-mcms |
High EPSS 5.47% |
<= 5.2.7 | No fix yet |
| GHSA-qwh6-xwj4-9cjg Remote code execution in net.mingsoft:ms-mcms |
Critical EPSS 2.22% |
< 5.2.6 | 5.2.6 |
| GHSA-968c-mm28-jfw4 SQL injection in net.mingsoft:ms-mcms |
Critical EPSS 1.08% |
<= 5.2.5 | No fix yet |
| GHSA-p94q-9q2m-pfh2 SQL injection in net.mingsoft:ms-mcms |
Critical EPSS 7.73% |
<= 5.2.5 | No fix yet |
| GHSA-73wx-rpj3-mx46 Path traversal in MCMS |
High EPSS 1.03% |
<= 5.2.4 | No fix yet |
| GHSA-g8j8-mgh9-q77p File upload leading to RCE in MCMS |
Critical EPSS 3.74% |
<= 5.2.4 | No fix yet |
| GHSA-gc79-gh4f-9g6w Server Side Template Injection in MCMS |
Critical EPSS 2.73% |
<= 5.2.5 | No fix yet |
| GHSA-rpvr-mw7r-25xx MCMS Arbitrary File Deletion vulnerability |
High EPSS 0.77% |
< 5.2.11 | 5.2.11 |
| GHSA-2pmw-cvc7-frvh SQL injection in MCMS |
Critical EPSS 1.41% |
<= 5.1 | No fix yet |
| GHSA-h3hw-g4hm-7gr4 SQL injection without credentials in ming-soft MCMS |
Critical EPSS 1.16% |
< 5.1 | 5.1 |
| GHSA-qqc2-pv68-q72h Mingsoft MCMS SQL injection vulnerability |
High EPSS 1.56% |
< 5.2.6 | 5.2.6 |
| GHSA-cwx9-rp4w-4545 Mingsoft MCMS vulnerable to Remote Code Execution via file upload. |
Critical EPSS 3.11% |
<= 5.2.5 | No fix yet |
| GHSA-phwq-9gc4-q5c8 Mingsoft MCMS SQL injection vulnerability |
High EPSS 1.52% |
<= 5.2.5 | No fix yet |
| GHSA-77hh-p7r6-66pv Arbitrary File Upload in Mingsoft MCMS |
Critical EPSS 2.58% |
<= 5.2.4 | No fix yet |
| GHSA-8wq7-hhjj-fpqv RCE in Mingsoft MCMS |
Critical EPSS 23.69% |
< 5.2.9 | 5.2.9 |
| GHSA-fr5w-98mc-jjvg Arbitrary file upload in Mingsoft MCMS |
Critical EPSS 1.82% |
<= 5.2.4 | No fix yet |
| GHSA-c7c7-xm8g-xm36 Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms |
Critical EPSS 1.21% |
<= 4.6.5 | No fix yet |
| GHSA-7hjp-97g3-rq93 Path Traversal in minsoft:ms-mcms |
High EPSS 1.54% |
<= 4.6.5 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor