GitHub Advisoryadvisory · Maven

GHSA-595x-hh6c-hfv8 SQL injection in jflyfox jfinal

HIGH Published 2022-05-27 Modified 2022-06-03 Official page ↗

Aliases: CVE-2022-30500
Ecosystem: Maven
Packages: com.jflyfox:jflyfox_jfinal
Severity: High
Weaknesses: CWE-89
Reviewed: 2022-06-03

Affected packages

• Maven com.jflyfox:jflyfox_jfinal: <= 5.1.0 (no fix yet)

Description

Jfinal cms 5.1.0 is vulnerable to SQL Injection.

Related

Alias · CVE (1)

CVE-2022-30500 Jfinal cms 5.1.0 is vulnerable to SQL Injection. vulnerability

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References