Search for packages
| purl | pkg:maven/com.jfinal/jfinal@2.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-112z-vk29-mqfp
Aliases: CVE-2021-33348 GHSA-2c25-xfpq-8w9r |
Affected by 32 other vulnerabilities. |
|
|
VCID-1zbf-vz8c-6fdn
Aliases: CVE-2023-50102 GHSA-p3ph-6245-4wfc |
Affected by 1 other vulnerability. |
|
|
VCID-27b9-9wd8-nqb1
Aliases: CVE-2023-50137 GHSA-xv7p-jw46-8r85 |
Affected by 1 other vulnerability. |
|
|
VCID-2nyn-zg2q-kbcy
Aliases: CVE-2024-22497 GHSA-qh2w-9m7w-hjg2 |
Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. |
Affected by 1 other vulnerability. |
|
VCID-354v-2fp3-gfdx
Aliases: CVE-2023-49381 GHSA-r222-mcff-27ff |
Affected by 1 other vulnerability. |
|
|
VCID-3fcp-e5ym-m7ha
Aliases: CVE-2021-31649 GHSA-h3j8-fr5q-8rfr |
JFinal Java Deserialization Vulnerability |
Affected by 34 other vulnerabilities. Affected by 33 other vulnerabilities. |
|
VCID-3nnf-d6rh-73gx
Aliases: CVE-2023-49396 GHSA-882g-gjqp-9vjp |
Affected by 1 other vulnerability. |
|
|
VCID-45ur-b829-rbgv
Aliases: CVE-2023-49373 GHSA-cj7j-23wf-mhrx |
Affected by 1 other vulnerability. |
|
|
VCID-5drm-1me6-6kcb
Aliases: CVE-2023-49398 GHSA-mwvq-gc5w-m78f |
Affected by 1 other vulnerability. |
|
|
VCID-5kw4-cjbh-1bdh
Aliases: CVE-2023-49376 GHSA-w492-7g9m-j2ww |
Affected by 1 other vulnerability. |
|
|
VCID-5yzu-2p73-2yg4
Aliases: CVE-2024-22492 GHSA-859h-4w58-78xw |
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML. |
Affected by 1 other vulnerability. |
|
VCID-6xjf-nmwh-2ygb
Aliases: CVE-2023-50100 GHSA-3hf6-f8ch-5869 |
Affected by 1 other vulnerability. |
|
|
VCID-82p1-qbvu-efeg
Aliases: CVE-2022-33113 GHSA-9pvq-4cc7-24jg |
Cross-site Scripting in Jfinal CMS |
Affected by 0 other vulnerabilities. |
|
VCID-82qu-67k6-efgs
Aliases: CVE-2023-49395 GHSA-8hch-q86g-j38w |
Affected by 1 other vulnerability. |
|
|
VCID-b53k-vpxw-t3gh
Aliases: CVE-2023-49375 GHSA-gfhv-xxqj-h323 |
Affected by 1 other vulnerability. |
|
|
VCID-cryu-7dxb-5ygn
Aliases: CVE-2023-49397 GHSA-5f56-h6fg-rcrh |
Affected by 1 other vulnerability. |
|
|
VCID-d7b4-d2ju-fkhj
Aliases: CVE-2023-49487 GHSA-m42v-qv3c-h6j7 |
Affected by 1 other vulnerability. |
|
|
VCID-f296-yvy3-5kf9
Aliases: CVE-2023-49447 GHSA-32j2-c7mx-v4jj |
Affected by 1 other vulnerability. |
|
|
VCID-gjny-2bdr-x3hb
Aliases: CVE-2023-49377 GHSA-r6mg-fq87-gw34 |
Affected by 1 other vulnerability. |
|
|
VCID-mkjz-3rsc-qyd9
Aliases: CVE-2023-50449 GHSA-7x2g-4jvc-4x6p |
Affected by 1 other vulnerability. |
|
|
VCID-mnj9-6xps-vfgs
Aliases: CVE-2023-49372 GHSA-9wvj-wr2f-6mx6 |
Affected by 1 other vulnerability. |
|
|
VCID-p847-h143-mbdf
Aliases: CVE-2023-49382 GHSA-6v55-h6m5-2352 |
Affected by 1 other vulnerability. |
|
|
VCID-pmnu-e15z-myhg
Aliases: CVE-2023-49380 GHSA-765f-3mgx-24pw |
Affected by 1 other vulnerability. |
|
|
VCID-q29x-aunb-47am
Aliases: CVE-2023-49379 GHSA-r2wj-mxvh-wqfh |
Affected by 1 other vulnerability. |
|
|
VCID-q45n-cyg9-97bw
Aliases: CVE-2019-17352 GHSA-279p-pc38-xx4p |
JFinal file validation vulnerability |
Affected by 34 other vulnerabilities. Affected by 34 other vulnerabilities. |
|
VCID-rkvt-wtkj-7fbm
Aliases: CVE-2023-49486 GHSA-hjfp-2j7q-xmx4 |
Affected by 1 other vulnerability. |
|
|
VCID-s37r-ptss-euft
Aliases: CVE-2023-49374 GHSA-r7w2-j96v-vw8m |
Affected by 1 other vulnerability. |
|
|
VCID-sxvz-rf3y-yuef
Aliases: CVE-2023-49446 GHSA-hv4c-v8j8-54cw |
Affected by 1 other vulnerability. |
|
|
VCID-szda-c4tt-xfhk
Aliases: CVE-2024-22496 GHSA-v435-pfj6-68r3 |
Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. |
Affected by 1 other vulnerability. |
|
VCID-uexx-rhq8-gue1
Aliases: CVE-2023-49378 GHSA-gw26-cchc-8f2f |
Affected by 1 other vulnerability. |
|
|
VCID-vjtk-sz1r-4yem
Aliases: CVE-2023-49485 GHSA-f2w8-4m48-5qrq |
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. |
Affected by 1 other vulnerability. |
|
VCID-x5b2-ryqc-tyfk
Aliases: CVE-2023-49448 GHSA-pv3g-vc3q-8c9g |
Affected by 1 other vulnerability. |
|
|
VCID-y9s5-n6we-byhn
Aliases: CVE-2024-22493 GHSA-3j4x-9q9q-3277 |
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. |
Affected by 1 other vulnerability. |
|
VCID-y9u5-hd6w-cbaz
Aliases: CVE-2023-50101 GHSA-m3p6-43xj-pf9v |
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. |
Affected by 1 other vulnerability. |
|
VCID-yekz-6x9y-23e4
Aliases: CVE-2023-49383 GHSA-rq2q-hc6h-2px2 |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||