CVE-2019-9614

2019-03-0622:00:00

mitre

www.cve.org

issue

ofcms

template

file

command execution

freemarker

vulnerability

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

49.3%

JSON

An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with ‘<#assign ex=“freemarker.template.utility.Execute”?new()> ${ ex("’ followed by the command.

References

www.seebug.org/vuldb/ssvid-97837