CVE-2022-23329

A vulnerability in $"freemarker.template.utility.Execute"?new of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files...

EUVD-2022-28409

Malicious code in bioql PyPI...

CVE-2022-23329

The CVE-2022-23329 entry affects UJCMS Jspxcms v10.2.0, where a vulnerability in freemarker.template.utility.Execute?new() enables arbitrary command execution via uploading malicious files. Affected component: Jspxcms file upload handling leading to code execution. Root cause is the Freemarker Ex...