CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail

published January 26, 2022

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01339 · 71.1th percentile
Published
2022-01-26T18:50Z
EPSS history
Timeline
  • 26 JAN 18:50Z
    jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail
    cvelistv5