180 matches found
CVE-2021-46118
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...
CVE-2021-46118
CVE-2021-46118 affects jpress 4.2.0, enabling remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel allows editing email templates, which can be exploited to inject malicious code. While multiple sources describe the vulnerability as RCE with high se...
CVE-2021-46117
CVE-2021-46117 affects jpress 4.2.0 and enables remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The issue arises because the admin panel allows editing email templates, enabling attackers to inject malicious code. Publicly disclosed details in the provided documents con...
CVE-2021-46117
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...
Jpress 代码注入漏洞
Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.module.product.ProductNotifyKit...
Jpress 代码注入漏洞
Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that originates from remote code execution via io.jpress.module.article.kit.ArticleNotifyKit...
Jpress 代码注入漏洞
Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...
jpress 代码问题漏洞
Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.web.admin. Attackers can exploit this vulnerability by uploading templates and injecting malicious code...
Jpress 代码问题漏洞
Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...
Jpress file upload vulnerability
Jpress is a blogging platform developed by the Jpress team using the Java language. v4.2.0 of Jpress is vulnerable to a file upload vulnerability, which stems from the fact that the software allows users to register an account by default and upload arbitrary files to the server. An attacker could...
CVE-2021-45808
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...
CVE-2021-45808
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...
CVE-2021-45808
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...
Design/Logic Flaw
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...
CVE-2021-45808
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...
CVE-2021-45808
CVE-2021-45808 affects Jpress v4.2.0. Connected sources describe a file-upload vulnerability enabled by default account registration, allowing upload of arbitrary files to the server and potential remote code execution. No explicit remediation or patch details are provided in the supplied documen...
Jpress 代码问题漏洞
Jpress is a blogging platform developed by the Jpress team using the Java language. v4.2.0 of Jpress is vulnerable to a file upload vulnerability, which stems from the fact that the software allows users to register an account by default and upload arbitrary files to the server. An attacker could...
Jpress Access Control Error Vulnerability
Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...
jpress command injection vulnerability
Jpress is a set of blogging platform developed by the Jpress team using the Java language. jpress has a security vulnerability that can be exploited by attackers to inject some malicious code through functional modifications to the template...