CVE-2024-1257

概要

参考情報

• sweatxi/BugHub · Exploit
• vuldb.com · Permissions Required
• vuldb.com · Third Party Advisory

jspxcms のその他の脆弱性

• CVE-2025-25772中 5.1A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add A…
• CVE-2024-1256中 4.3A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/colle…
• CVE-2024-0599中 5.4A vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality…
• CVE-2022-28090中 6.5Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.
• CVE-2022-23329緊急 9.8A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via…