CVE-2019-9613 in OFCMS情報

要約

〜によって MITRE

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadVideo URI.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2019年03月06日

モデレーション

承諾済み

エントリ

VDB-131407

CPE

準備完了

CWE

CWE-434 (確認済み)

CVSS

7.2 (NVD)

EPSS

0.02708

KEV

いいえ

アクティビティ

非常低い

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2019-9613
NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-9613
CVE Details	https://www.cvedetails.com/cve/CVE-2019-9613/

◂ 前概要次 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!