Unscored CVE-2021-40639 EUVD-2021-27813GHSA-8m3p-xv8v-vgp2

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=fileman…

Published Sep 15, 2021 · Updated Jul 9, 2026 · Assigned by mitre

Description

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.

References

https://github.com/jflyfox/jfinal_cms
https://github.com/jflyfox/jfinal_cms/issues/27