CVE-2019-8954

2022-10-0316:19:35

mitre

www.cve.org

indexhibit

remote execution

arbitrary code

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI.

References

www.iwantacve.cn/index.php/archives/112/