CVE-2021-45808

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-01-19

Last modified

2026-07-09

Weaknesses

CWE-434

Affected products

• Jpress (Jpress)

References

• https://github.com/JPressProjects/jpress
• https://github.com/JPressProjects/jpress/issues/173