Skip to content
OpenAdvisories

Package · Maven

com.jfinal:jfinal

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-31635

    jFinal Server-Side Template Injection vulnerability

    Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.

    com.jfinal:jfinal Maven
  • Critical —
    CVE-2021-31649

    JFinal Java Deserialization Vulnerability

    In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute

    com.jfinal:jfinal Maven