Security Advisory
CVE-2018-12914
9.8
CRITICAL
Vulnerability Description
A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI.
Published Date
June 27, 2018
Official Source
NIST NVD Advisory