Question 1

What is CVE-2021-46115 — CVE-2021-46115?

Accepted Answer

jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through which attackers can upload templates and inject some malicious code.

Question 2

What is the authoritative source for CVE-2021-46115?

Accepted Answer

CVE-2021-46115 (CVE-2021-46115) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	7.2 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Last modified	2026-07-05

CVE-2021-46115CVE-2021-46115

Description

Scoring