← Back

Trufusion

trufusion

Vendor: Rocketsoftware • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36431
1Rocketsoftware
1Trufusion
Apr 24, 2025
Dec 1, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1.