← Database

CVE-2022-23329

CRITICAL CVSS: 9.8 Published: 2022-02-04 Modified: 2026-06-17

Description

A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

Affected Platforms

Ujcms Jspxcms

Weakness Type

CWE-434

References