Staging Environment: Content and features may be unstable or change without notice.
Progress 0 / 0

Advisory Summary

gitlab/maven/net.mingsoft/ms-mcms/CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.
Mitigation Type Mitigation Data Mitigation Note