critical9.8
CVE-2023-51350
A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-…
Impact
A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ujcms | Ujcms | Version 8.0.2 |