Critical · 9.8 CVE-2023-30349 EUVD-2023-1242GHSA-8qhm-ch8h-xgjr

Remote code execution in JFinal CMS

Published Apr 27, 2023 · Updated Jan 31, 2025 · Assigned by mitre

Description

JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.jflyfox:jflyfox_jfinal	<= 5.1.0	—	GHSA-8qhm-ch8h-xgjr