Command injection

2023-01-2621:16:00

PRIOn knowledge base

www.prio-n.com

rawchen blog-ssm v1.0

remote attacker

command injection

privileges escalation

arbitrary commands

upfile component

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.

CPENameOperatorVersion
javaweb_blogeq1.0

CPE	Name	Operator	Version
	javaweb_blog	eq	1.0

References

github.com/rawchen/blog-ssm/issues/2