Hardcoded credentials

2023-06-1414:15:00

PRIOn knowledge base

www.prio-n.com

ujcms v6.0.2

hardcoded credentials

sensitive information

exposure vulnerability

web-file-html

download-zip

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

JSON

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.

CPENameOperatorVersion
ujcmseq6.0.2

CPE	Name	Operator	Version
	ujcms	eq	6.0.2

References

github.com/ujcms/ujcms/issues/6