CVE-2022-40037

CRITICAL CVSS: 9.8 Published: 2023-01-26 Modified: 2026-06-17

Description

An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.

Affected Platforms

Javaweb Blog Project Javaweb Blog

Weakness Type

CWE-434, CWE-434

References