Javaweb Blog Project Javaweb Blog
2 CVEs affecting Javaweb Blog Project Javaweb Blog. Latest disclosed: 2023-01-26. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-40037 | Critical | 9.8 | 2023-01-26 | An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile. |
CVE-2022-40034 | Medium | 5.4 | 2023-01-23 | Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter. |