6 matches found
Jpress Access Control Error Vulnerability
Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...
9.8CVSS3.1AI score0.02118EPSS
SaveExploits1References1
CVE-2021-45807
jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...
9.8CVSS7AI score
SaveExploits0References2
CVE-2021-45807
jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...
9.8CVSS0.02118EPSS
SaveExploits1References2
Command injection
jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...
7.5CVSS9.5AI score0.02118EPSS
SaveExploits1References3Affected Software1
20