Description
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive infromation via the 'getFolder()' function in the component '/modules/filemanager/FileManager.java'.
Unscored
CVE-2020-19147
EUVD-2020-11054GHSA-j24v-hvrr-gw8v
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive infromation via the 'getFolder()' func…
Published Sep 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre