CVE-2021-46118

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46118

CVE-2021-46118 affects jpress 4.2.0, enabling remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel allows editing email templates, which can be exploited to inject malicious code. While multiple sources describe the vulnerability as RCE with high se...

CVE-2021-46118

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46117

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46117

CVE-2021-46117 affects jpress 4.2.0 and enables remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The issue arises because the admin panel allows editing email templates, enabling attackers to inject malicious code. Publicly disclosed details in the provided documents con...

CVE-2021-46117

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

PT-2022-12577

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution via the io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail function. The admin panel provides a function through which attackers can edit the email templates and...

jpress code issues and vulnerabilities

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.web.admin. Attackers can exploit this vulnerability by uploading templates and injecting malicious code...

Jpress code injection vulnerability

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.module.product.ProductNotifyKit...

Jpress code injection vulnerability

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that originates from remote code execution via io.jpress.module.article.kit.ArticleNotifyKit...

PT-2022-12573

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution RCE via the io.jpress.module.product.ProductNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit...

PT-2022-12574

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution RCE via the io.jpress.web.admin. TemplateControllerdoUploadFile function. This function, accessible through the admin panel, enables attackers to upload templates and...

CVE-2021-46115: Unrestricted Upload of File with Dangerous Type

jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin.TemplateControllerdoUploadFile. The admin panel provides a function through which attackers can upload templates and inject some malicious code...

CVE-2021-46117: Improper Control of Generation of Code

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114: Improper Control of Generation of Code

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

PT-2022-12576

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution via the io.jpress.module.page.PageNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit email...

CVE-2021-46118: Improper Control of Generation of Code

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

Jpress code injection vulnerability

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...

PT-2022-12575

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution via the io.jpress.web.admin. TemplateControllerdoInstall function. This function, accessible through the admin panel, enables attackers to install templates and inject...

CVE-2021-46116: Unrestricted Upload of File with Dangerous Type

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin.TemplateControllerdoInstall. The admin panel provides a function through which attackers can install templates and inject some malicious code...