CVE-2021-33523

MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary…

published March 30, 2022

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01847 · 78.9th percentile
Published
2022-03-30T22:06Z
EPSS history
Timeline
  • 30 MAR 22:06Z
    MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary…
    cvelistv5