CVE-2024-50919

Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution...

CVE-2024-50919

Jpress, a Java-based blogging platform, versions prior to v5.1.1 are vulnerable to an arbitrary file upload vulnerability on the Windows platform . This flaw allows an attacker to construct non-standard file formats, such as .jsp , which can lead to arbitrary command execution . To mitigate this ...

Guizhou small code technology limited company jpress exist file upload vulnerability

jpress is a complete Java CMS web management system. Ltd. jpress has a file upload vulnerability, which can be exploited by attackers to obtain sensitive information such as user cookies by uploading files...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

PT-2024-32002

Name of the Vulnerable Software and Affected Versions jpress versions prior to 5.1.1 Description A Server-Side Request Forgery SSRF issue exists, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure. Recommendations For versions prior to...

CVE-2024-46468

A Server-Side Request Forgery (SSRF) vulnerability exists in the jpress blogging platform, affecting versions

Jpress 安全漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in Jpress 5.1.1 and earlier versions, which stems from vulnerability to server-side request forgery attacks, leading to the disclosure of sensitive information...

CVE-2024-46468: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

XSS vulnerability in jpress of Guizhou Small Code Technology Co. Ltd (CNVD-2024-46157)

jpress is a CMS system developed using Java. Guizhou Small Code Technology Co. jpress has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

CVE-2024-8304

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

CVE-2024-8304 jpress Template Module edit path traversal

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

CVE-2024-8304

CVE-2024-8304 affects jpress up to version 5.1.1, where the Template Module Handler’s /admin/template/edit functionality is vulnerable to path traversal. The vulnerability is reachable remotely and has been publicly disclosed. Multiple sources confirm the issue and describe the impact as enabling...

CVE-2024-8304 jpress Template Module edit path traversal

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

CVE-2024-8304 jpress Template Module edit path traversal

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

PT-2024-38929 · Jpress · Jpress

Name of the Vulnerable Software and Affected Versions: jpress versions up to 5.1.1 Description: A critical vulnerability has been found in the Template Module Handler component of jpress, affecting an unknown functionality of the file /admin/template/edit. The manipulation leads to path traversal...

CVE-2024-8304: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...