Threats affecting pkg:maven/org.dromara/jpom

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-120201Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to Critical9.32026-10-31GCVE DatabaseCVE-2026-120201 Jpom versions 2.10.0 through 2.11.12 have an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. This enables attackers to execute commands via Jpom's script features. Report on CVE-2026-120201 Vulnerability CWE-943 #ghsa-mr28-xw2h-9rw4	GCVE Database	2026-10-31

Page 1 of 1