Skip to content
OpenAdvisories

Product · JFinal

CMS

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    JFinal CMS readTemplate engine.getTemplate path traversal

    A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack …