CVE-2021-45807

2022-01-1319:15:08

Google

osv.dev

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.6%

JSON

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.

CPENameOperatorVersion
jpresseq2.0-rc.8
jpresseq1.0.1
jpresseq4.0.2
jpresseq3.2.5
jpresseq4.0.6
jpresseq1.0.4
jpresseq2.0-rc.4
jpresseq2.0-rc.1
jpresseq0.0.2
jpresseq1.0

Name	Operator	Version
jpress	eq	2.0-rc.8
jpress	eq	1.0.1
jpress	eq	4.0.2
jpress	eq	3.2.5
jpress	eq	4.0.6
jpress	eq	1.0.4
jpress	eq	2.0-rc.4
jpress	eq	2.0-rc.1
jpress	eq	0.0.2
jpress	eq	1.0

Rows per page:

1-10 of 911

References

jpress.com

github.com/JPressProjects/jpress

github.com/JPressProjects/jpress/issues/167