CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

Remote code execution

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

CVE-2022-23330 affects jpress v4.2.0, specifically the HelloWorldAddonController.java component. The vulnerability allows remote code execution by supplying a crafted JAR package, enabling an attacker to run arbitrary code on the affected system. The connected Red Hat, NVD, OSV, and related recor...

PT-2022-15934

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description A remote code execution issue in HelloWorldAddonController.java allows attackers to execute arbitrary code via a crafted JAR package. Recommendations For jpress version 4.2.0, at the moment, there is no...

jpress security vulnerabilities

Jpress is a blogging platform developed by the Jpress team using the Java language. A security vulnerability exists in jpress, which stems from a Remote Code Execution RCE vulnerability in HelloWorldAddonController.java in jpress v4.2.0 that allows an attacker to execute arbitrary code via a...

CVE-2022-23330: Undefined Security Weakness

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

Unspecified Vulnerability in Jpress (CNVD-2022-08353)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...

Unspecified vulnerability in jpress (CNVD-2022-08351)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.web.admin. Attackers can exploit this vulnerability by uploading templates and injecting malicious code...

Unspecified vulnerability in jpress (CNVD-2022-08352)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

CVE-2021-46114 affects jpress v4.2.0. The vulnerability is a remote code execution through io.jpress.module.product.ProductNotifyKit#doSendEmail , where the admin panel’s email template editor can be abused to inject malicious code. Impact: arbitrary code execution; reported in multiple sources. ...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46118

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46116

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin.TemplateControllerdoInstall. The admin panel provides a function through which attackers can install templates and inject some malicious code...