CVE-2024-32358

Published: Apr 25, 2024

Modified: Mar 13, 2025

PUBLISHED

Description

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.wolai.com/catr00t/2LujDzjjcrAjUYpWtcusXD

https://gist.github.com/rootlili/a6b6c89591f4773857ae81b7ca5898bc

https://github.com/JPressProjects/jpress/releases/tag/v5.1.0

https://gitee.com/JPressProjects/jpress/releases/tag/v5.1.0

https://www.jpress.cn/download

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-32358

Description

Affected Products

References