Description
An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with '<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("' followed by the command.
Unscored
CVE-2019-9614
EUVD-2019-18985GHSA-6rh3-q56c-rhc7
An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with '<#assign ex="freemarker.t…
Published Mar 6, 2019 · Updated Sep 16, 2024 · Assigned by mitre