CyberRota Analysis
AI-GeneratedA vulnerability in the Dromara UJCMS web-file-template endpoint allows remote attackers to manipulate templates due to improper neutralization of special elements. This can lead to potential exploitation that may compromise the integrity of the application. Organizations using UJCMS versions up to 10.1.3 should prioritize patching this flaw to mitigate risks associated with remote attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been published and may be used.