CVE-2021-33523

2022-03-3022:06:40

mitre

www.cve.org

mashzone nextgen

remote user

jdbc driver

arbitrary command execution

admin console

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController.