Mecha-cms vulnerabilities
We track 1 vulnerability in Mecha-cms products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Mecha-cms vulnerabilities
- 9.8 Critical severity
mecha_cms: Improper Limitation of a Pathname to a Restricted Directory
Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover.