Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.jflyfox:jflyfox_jfinal | <= 5.1.0 | — | GHSA-wv39-f3vx-3v6q |
Critical · 9.8
CVE-2022-37223
EUVD-2022-6641GHSA-wv39-f3vx-3v6q
SQL injection in jflyfox jfinal
Published Aug 23, 2022 · Updated Aug 3, 2024 · Assigned by mitre