2022-01-13 18:22:45
mitre
PUBLISHED
jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.