Description
An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1.
Critical · 9.8
CVE-2022-36431
EUVD-2022-39143GHSA-hccp-2vx9-gv82
An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary …
Published Dec 1, 2022 · Updated Apr 24, 2025 · Assigned by mitre