CVE-2022-23329

2022-02-0421:03:52

mitre

www.cve.org

vulnerability

ujcms jspxcms v10.2.0

arbitrary command execution

uploaded files

freemarker template utility execute

cve-2022-23329

AI Score

9.9

Confidence

High

EPSS

0.003

Percentile

70.9%

JSON

A vulnerability in ${“freemarker.template.utility.Execute”?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

References

gitee.com/jspxcms/Jspxcms/issues/I4QAZN