MCMS Arbitrary File Deletion vulnerability

net.mingsoft:ms-basic is used for plugin management for applications built with Maven for the Mingfei Content Management System MCMS. ms-basic before 2.1.16 is vulnerable to arbitrary file deletion using POST requests to /template/writeFileContent via the oldFileName parameter. MCMS before 5.2.11...

PT-2022-12541

Name of the Vulnerable Software and Affected Versions Mingfei Content Management System MCMS versions prior to 5.2.11 net.mingsoft:ms-basic versions prior to 2.1.16 Description The issue allows for arbitrary file deletion. This can be achieved via the oldFileName parameter in POST requests to the...