CVE-2021-46037 - MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do

HIGH

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do

Published Feb 18, 2022

8.1

HIGH

CVSS 3.1

EPSS 1.03%

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0878		Advisory
https://github.com/advisories/GHSA-73wx-rpj3-mx46		Advisory
https://lycshub.github.io/2021/12/28/MCMS-vulnerabilities/		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-46037