Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ming-soft/MCMS

              master @ e3f7324
            

Fixes

CVEs

CRITICAL

Peak severity

45.0%

Coverage

Highlights

SQL Injection: 8 prior fixes. Scrutinize any change in this area.

src/main/java/net/mingsoft/cms/action/web/MCmsAction.java: most-fixed (8 issues). Treat as high-risk during review.

14 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: The controller frequently executes dynamic database queries. Parameters like 'orderby' and 'order' were repeatedly targeted for injection due to missing or inadequate sqlFilter checks, leading to critical severity execution vectors.

SQL Injection: The use of raw string interpolation (`${}`) inside MyBatis XML queries allowed direct parameter injection, requiring a transition to parameterized prepared statements (`#{}`) combined with controller-level input validation.

Path Traversal: Dynamic file output generation and static parsing operations did not enforce path canonicalization, allowing attackers to write or delete arbitrary files on the local filesystem.