CVE-2019-9613

7.2 highEPSS 2.7%

High (7.2) in ofcms project ofcms. EPSS 2.7% chance of exploitation in the next 30 days.

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadVideo URI.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2019-03-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ofcms_project:ofcms

References

https://www.seebug.org/vuldb/ssvid-97834
https://www.seebug.org/vuldb/ssvid-97834

Check your stack JSON