Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/net.mingsoft/ms-basic@2.1.13.2
purl pkg:maven/net.mingsoft/ms-basic@2.1.13.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.2
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-rpvr-mw7r-25xx
Aliases:
CVE-2021-46062
MCMS Arbitrary File Deletion vulnerability `net.mingsoft:ms-basic` is used for plugin management for applications built with Maven for the [Mingfei Content …
2.1.16
Vulnerable
GHSA-64cm-3cj3-67hf
Aliases:
CVE-2024-33748
MS Basic Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and … There are no reported fixed by versions.
CVE-2021-46062
Aliases:
GHSA-rpvr-mw7r-25xx
Path traversal in MCMS MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName. There are no reported fixed by versions.
This package is not known to fix any advisories.