Threats affecting pkg:maven/io.jpress/jpress

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 1.0%	CVE-2024-43033jpress · Improper Handling of Windows ::DATA Alternate Data Stream High8.8EPSS 1.0%2024-08-22CVE Database V5CVE-2024-43033 JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentController#upload. NOTE: this is unrelated to the attack vector for CVE-2024-32358. EPSS 1.0%Vulnerability CWE-69	CVE Database V5	2024-08-22

Page 1 of 1