| タイトル | JPress CMS Remote Command Execution Vulnerability |
|---|
| 説明 | JPress is a WordPress like product developed in Java that supports automatic switching between multiple sites and languages.
JPress is an open-source and free site building artifact developed in Java, inspired by WordPress. At present, more than 10w+websites have been built using JPress, including many government agencies, 200+listed companies, Chinese Academy of Sciences, Red Cross Society, etc.
There is a system plug-in interface that can be uploaded in the background of JPress. Specifically, it is uploaded by jar package or zip. Java code contains the test class of the uploaded plug-in. We can construct a malicious jar package and upload it to the system server, and access the interface of the test class to trigger parsing, thus causing remote command execution.
This vulnerability can be used to execute server system commands and obtain system information.
Vulnerability address: http://ip:8080/admin/addon/test
Code download address: https://gitee.com/JPressProjects/jpress.git
Vulnerability location: upload the plug-in function node after logging into the system. |
|---|
| ソース | ⚠️ https://github.com/Ha0Liu/cveAdd/blob/developer/JPress远程命令执行/JPress%20CMS%20Remote%20Command%20Execution%20Vulnerability.md |
|---|
| ユーザー | ha0l (UID 35011) |
|---|
| 送信 | 2022年11月23日 09:47 (4 年 ago) |
|---|
| モデレーション | 2022年11月24日 14:56 (1 day later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 192332 [JPress 4.2.0 JAR Package HelloWorldAddonController.java 特権昇格] |
|---|
| ポイント | 0 |
|---|