CVE-2019-9612 - An issue was discovered in OFCMS before 1.1.3

Back Back to CVE browser

HIGH

An issue was discovered in OFCMS before 1.1.3

Published Mar 6, 2019

8.8

HIGH

CVSS 3.0

EPSS 2.70%

Description

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/upload URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18983
Advisory
https://www.seebug.org/vuldb/ssvid-97835
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18983		Advisory
https://www.seebug.org/vuldb/ssvid-97835		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 6, 2019

Updated Sep 16, 2024

Reserved Mar 6, 2019

Link CVE-2019-9612

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-9612

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 6, 2019

Updated Sep 16, 2024

Link EUVD-2019-18983

GitHub

No data