NetSight
critical9.8

CVE-2022-23329

A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading maliciou…

Impact

A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

Affected products

VendorProductAffected versions
UjcmsJspxcms
Version 10.2.0

Weakness classification

References