Skip to content
COOEY

FAIL › dossier

jpress

VENDOR

Failure events
1
Zero-days
0
RCEs
1
On KEV
0
Critical
1
Worst shame
50
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-01-13 CVE-2021-45807 critical jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.
2022-01-13 CVE-2021-45807 critical jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.80
CVE-2021-45807 is a critical RCE vulnerability in jpress v4.2.0, confirmed by NVD and CISA KEV, indicating severe security failure.
cooey ↗severe-fallout-0.90
Critical RCE vulnerability confirmed
"jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall."
app.opencve.io ↗severe-fallout-0.50
Vulnerability listed in CVE database
"CVEs and Security Vulnerabilities - OpenCVE"
www.cvefind.com ↗severe-fallout-0.50
Vulnerability tracked in CVE database
"Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find"
dailysecurityreview.com ↗severe-fallout+0.00
Irrelevant to jpress vulnerability
"U.S. Judiciary Confirms Breach Of Federal Court Electronic Records System"
www.theguardian.com ↗severe-fallout+0.00
Irrelevant to jpress vulnerability
"news stories faked to lure victims to scam"
chromereleases.googleblog.com ↗severe-fallout+0.00
Irrelevant to jpress vulnerability
"Chrome Releases"
cvefeed.io ↗severe-fallout-0.50
Vulnerability tracked in CISA KEV
"CISA Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."