Security Advisory

CVE-2022-23329

9.8
CRITICAL

Vulnerability Description

A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
Published Date February 4, 2022
Official Source NIST NVD Advisory