CVE-2022-23330

2022-02-0422:15:07

Google

osv.dev

8.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.

CPENameOperatorVersion
jpresseq2.0-rc.8
jpresseq1.0.1
jpresseq4.0.2
jpresseq3.2.5
jpresseq4.0.6
jpresseq1.0.4
jpresseq2.0-rc.4
jpresseq2.0-rc.1
jpresseq0.0.2
jpresseq1.0