Lucene search
K

6 matches found

CNNVD
CNNVD
added 2022/01/26 12:0 a.m.2 views

jpress 代码问题漏洞

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.web.admin. Attackers can exploit this vulnerability by uploading templates and injecting malicious code...

7.2CVSS5.5AI score0.00452EPSS
Exploits1References3
CNVD
CNVD
added 2022/01/17 12:0 a.m.13 views

Jpress Access Control Error Vulnerability

Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...

9.8CVSS3.1AI score0.0219EPSS
Exploits1References1
OSV
OSV
added 2022/01/13 7:15 p.m.13 views

CVE-2021-45807

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

9.8CVSS7AI score
Exploits0References3
NVD
NVD
added 2022/01/13 7:15 p.m.10 views

CVE-2021-45807

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

9.8CVSS0.0219EPSS
Exploits1References3
Prion
Prion
added 2022/01/13 7:15 p.m.10 views

Command injection

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

7.5CVSS9.5AI score0.0219EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/01/13 6:22 p.m.11 views

CVE-2021-45807

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

9.8AI score0.0219EPSS
Exploits1References3
Rows per page
Query Builder