Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2024/04/25 12:00 a.m.•47 views

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.7AI score0.00736EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/04/25 12:00 a.m.•18 views

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.5CVSS8AI score0.00736EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•6 views

CVE-2024-32358: Improper Control of Generation of Code

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.5CVSS6.9AI score0.00736EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/25 12:00 a.m.•22 views

Jpress security vulnerabilities

Jpress is a blogging platform developed in Java language by Jpress team. A security vulnerability exists in Jpress version v.5.1.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the custom plug-in module functionality...

7.5CVSS6.8AI score0.00736EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•7 views

PT-2024-24533

Name of the Vulnerable Software and Affected Versions Jpress version 5.1.0 Description An issue in the custom plug-in module function allows a remote attacker to execute arbitrary code via a crafted script. This is a distinct issue from other known vulnerabilities. Recommendations For Jpress...

7.5CVSS6.8AI score0.00736EPSS
SaveExploits0References15
Rows per page
Query Builder