CVE-2021-45807

Severity

critical

Source

NVD · cve

Published

2022-01-13

CVSS

9.8

Reference

⚡ RCE shame 50/100 rce

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.

Players implicated

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.

synthesis severe-fallout -0.80

CVE-2021-45807 is a critical RCE vulnerability in jpress v4.2.0, confirmed by NVD and CISA KEV, indicating severe security failure.
cooey ↗ severe-fallout -0.90

Critical RCE vulnerability confirmed

“jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.”
www.cvefind.com ↗ severe-fallout -0.50

Vulnerability tracked in CVE database

“Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find”
cvefeed.io ↗ severe-fallout -0.50

Vulnerability tracked in CISA KEV

“CISA Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks.”
app.opencve.io ↗ severe-fallout -0.50

Vulnerability listed in CVE database

“CVEs and Security Vulnerabilities - OpenCVE”
www.theguardian.com ↗ severe-fallout +0.00

Irrelevant to jpress vulnerability

“news stories faked to lure victims to scam”
chromereleases.googleblog.com ↗ severe-fallout +0.00

Irrelevant to jpress vulnerability

“Chrome Releases”
dailysecurityreview.com ↗ severe-fallout +0.00

Irrelevant to jpress vulnerability

“U.S. Judiciary Confirms Breach Of Federal Court Electronic Records System”

No correlated FedRAMP products.