CVE-2021-45808

2022-01-1913:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

JSON

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

CPENameOperatorVersion
jpresseq2.0-rc.8
jpresseq1.0.1
jpresseq4.0.2
jpresseq3.2.5
jpresseq4.0.6
jpresseq1.0.4
jpresseq2.0-rc.4
jpresseq2.0-rc.1
jpresseq0.0.2
jpresseq1.0

Name	Operator	Version
jpress	eq	2.0-rc.8
jpress	eq	1.0.1
jpress	eq	4.0.2
jpress	eq	3.2.5
jpress	eq	4.0.6
jpress	eq	1.0.4
jpress	eq	2.0-rc.4
jpress	eq	2.0-rc.1
jpress	eq	0.0.2
jpress	eq	1.0

Rows per page:

1-10 of 911

References

jpress.com

github.com/JPressProjects/jpress

github.com/JPressProjects/jpress/issues/173