Command injection

2019-03-0622:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

JSON

An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with ‘<#assign ex=“freemarker.template.utility.Execute”?new()> ${ ex("’ followed by the command.

CPENameOperatorVersion
ofcmslt1.1.3

CPE	Name	Operator	Version
	ofcms	lt	1.1.3

References

www.seebug.org/vuldb/ssvid-97837