CVE-2019-9609

2019-03-06T22:29:00
ID CVE-2019-9609
Type cve
Reporter cve@mitre.org
Modified 2019-03-07T18:16:00

Description

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/editUploadImage URI.