Staging Environment:
Content and features may be unstable or change without notice.
VulnerableCode
.
io
Documentation
Advisory To-Dos
Pipeline Dashboard
API
About
VulnerableCode is a free and open database of software package vulnerabilities.
Live chat at
https://gitter.im/aboutcode-org/vulnerablecode
Source code and support at
https://github.com/nexB/vulnerablecode
Docs at
https://vulnerablecode.readthedocs.org/
Sponsored by NLnet
https://nlnet.nl/project/vulnerabilitydatabase/
for
https://www.aboutcode.org/
v40.2.0
Extra Mitigation Curation
github_osv/GHSA-g94p-h263-c26q
Progress
0 / 0
Advisory Summary
github_osv/GHSA-g94p-h263-c26q
Cross Site Request Forgery in Mingsoft MCMS MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.
Show more
Mitigation Type
Mitigation Data
Mitigation Note
Previous Item
Next Item
Submit