Javaweb Blog Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Javaweb Blog Project records in CISA KEV

No Javaweb Blog Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-18961 CVE-2022-40037 · GHSA-2gq6-5f59-3m4h

HIGH 82

An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01644 Published 2023-01-24 No fix listed CWE-434

TI-2022-18958 CVE-2022-40034 · GHSA-xgcq-vm6g-cgh7

MEDIUM 58

Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2023-01-23 No fix listed CWE-79