Vulnerabilities > Ujcms > Jspxcms > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-02-04 CVE-2022-23329 Unrestricted Upload of File with Dangerous Type vulnerability in Ujcms Jspxcms 10.2.0
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
network
low complexity
ujcms CWE-434
critical
9.8