CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

Jpress 安全漏洞

Jpress is a blogging platform developed in Java language by Jpress team. A security vulnerability exists in Jpress version v.5.1.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the custom plug-in module functionality...

CVE-2024-32358

CVE-2024-32358 affects JPress v5.1.0. The issue allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, indicating a code execution risk originating from the plug‑in handling path. No remediation patch/version details are provided in the supp...

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

Remote code execution

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

CVE-2022-23330

CVE-2022-23330 affects jpress v4.2.0, specifically the HelloWorldAddonController.java component. The vulnerability allows remote code execution by supplying a crafted JAR package, enabling an attacker to run arbitrary code on the affected system. The connected Red Hat, NVD, OSV, and related recor...

CVE-2022-23330

A remote code execution RCE vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package...

jpress 安全漏洞

Jpress is a blogging platform developed by the Jpress team using the Java language. A security vulnerability exists in jpress, which stems from a Remote Code Execution RCE vulnerability in HelloWorldAddonController.java in jpress v4.2.0 that allows an attacker to execute arbitrary code via a...

Unspecified Vulnerability in Jpress (CNVD-2022-08353)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...

Unspecified vulnerability in jpress (CNVD-2022-08352)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress version 4.2.0, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction...

Unspecified vulnerability in jpress (CNVD-2022-08351)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.web.admin. Attackers can exploit this vulnerability by uploading templates and injecting malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

CVE-2021-46114 affects jpress v4.2.0. The vulnerability is a remote code execution through io.jpress.module.product.ProductNotifyKit#doSendEmail , where the admin panel’s email template editor can be abused to inject malicious code. Impact: arbitrary code execution; reported in multiple sources. ...