Ujcms vulnerabilities
We track 3 vulnerabilities in Ujcms products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 11, 2024.
3vulnerabilities
2critical
1high
0exploited
9.0average CVSS score
Latest Ujcms vulnerabilities
- 9.8 Critical severity
Ujcms: Authentication Bypass by Spoofing
A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the header.
- 7.5 High severity
Ujcms: Observable Discrepancy
An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.
- 9.8 Critical severity
Jspxcms: Unrestricted Upload of File with Dangerous Type
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.