Headline
CVE-2022-36431
An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1.
�� ҽ� endstream endobj 3 0 obj 785 endobj 4 0 obj <> stream x��M�$� �� F_�+�l|빆�2��� ��@��%2H*�M����?���K�t�b�@גףÙ��,���/~�Z;4�Ȗj� |�(i#���@�o�s���O�� ��3�o3���^o嫵�XI�p�K8Z�~�#�����m’�������[��] ]۵�^>E&��hK���ݥ���������8�B[��%߮�’�3�N:p’Lرy�U���3@k,gF����’��ߋ���� ��� �<4c~uY�lڌ�ڶ��. �{ �N�.�U$e7�����I:i�c/�Pv?�CA��f,YG-~h�6l��9����]��&|�*����S���R�Ѫ���Hx�C�C3��#�m�O> h�’���!�� zi�s���L’��KW���f�+7`��?%A��@#@<��\~�Aܪ�Ea�+�\6���$�7d�Fr�J�����˔��{N ������] �5�#��Q�NBm��3��;���-l��җs����Ca {�Ѕ�ryZ ��,�^M����6F5��D $�gqP ���i�8�j M��.6�4V \��k9����:o팠��rM� ?�^ � A��]l �m`ʯ���� @�(��[�(��A�|-�,���h�c!h! x�� �p8��8�� ]+�0&���mdcB���+��|f.�&�+�