https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 08:52:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-120201 <p>Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like &#39;is not null&#39;, which Hutool&#39;s Condition parser treats as an operator, then execute commands through Jpom&#39;s script features.</p> <p>Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like &#39;is not null&#39;, which Hutool&#39;s Condition parser treats as an operator, then execute commands through Jpom&#39;s script features.</p> https://db.gcve.eu/vuln/fkie_cve-2026-120201 https://db.gcve.eu/vuln/ghsa-mr28-xw2h-9rw4 <p>Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like &#39;is not null&#39;, which Hutool&#39;s Condition parser treats as an operator, then execute commands through Jpom&#39;s script features.</p> <p>Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like &#39;is not null&#39;, which Hutool&#39;s Condition parser treats as an operator, then execute commands through Jpom&#39;s script features.</p> https://db.gcve.eu/vuln/ghsa-mr28-xw2h-9rw4