Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.jfinal/jfinal@2.2
purl pkg:maven/com.jfinal/jfinal@2.2
Next non-vulnerable version 5.1.1
Latest non-vulnerable version 5.1.1
Risk 4.5
Vulnerabilities affecting this package (35)
Vulnerability Summary Fixed by
VCID-112z-vk29-mqfp
Aliases:
CVE-2021-33348
GHSA-2c25-xfpq-8w9r
4.9.11
Affected by 32 other vulnerabilities.
VCID-1zbf-vz8c-6fdn
Aliases:
CVE-2023-50102
GHSA-p3ph-6245-4wfc
5.0.1
Affected by 1 other vulnerability.
VCID-27b9-9wd8-nqb1
Aliases:
CVE-2023-50137
GHSA-xv7p-jw46-8r85
5.0.1
Affected by 1 other vulnerability.
VCID-2nyn-zg2q-kbcy
Aliases:
CVE-2024-22497
GHSA-qh2w-9m7w-hjg2
Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.
5.0.1
Affected by 1 other vulnerability.
VCID-354v-2fp3-gfdx
Aliases:
CVE-2023-49381
GHSA-r222-mcff-27ff
5.0.1
Affected by 1 other vulnerability.
VCID-3fcp-e5ym-m7ha
Aliases:
CVE-2021-31649
GHSA-h3j8-fr5q-8rfr
JFinal Java Deserialization Vulnerability
4.9.01
Affected by 34 other vulnerabilities.
4.9.09
Affected by 33 other vulnerabilities.
VCID-3nnf-d6rh-73gx
Aliases:
CVE-2023-49396
GHSA-882g-gjqp-9vjp
5.0.1
Affected by 1 other vulnerability.
VCID-45ur-b829-rbgv
Aliases:
CVE-2023-49373
GHSA-cj7j-23wf-mhrx
5.0.1
Affected by 1 other vulnerability.
VCID-5drm-1me6-6kcb
Aliases:
CVE-2023-49398
GHSA-mwvq-gc5w-m78f
5.0.1
Affected by 1 other vulnerability.
VCID-5kw4-cjbh-1bdh
Aliases:
CVE-2023-49376
GHSA-w492-7g9m-j2ww
5.0.1
Affected by 1 other vulnerability.
VCID-5yzu-2p73-2yg4
Aliases:
CVE-2024-22492
GHSA-859h-4w58-78xw
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML.
5.0.1
Affected by 1 other vulnerability.
VCID-6xjf-nmwh-2ygb
Aliases:
CVE-2023-50100
GHSA-3hf6-f8ch-5869
5.0.1
Affected by 1 other vulnerability.
VCID-82p1-qbvu-efeg
Aliases:
CVE-2022-33113
GHSA-9pvq-4cc7-24jg
Cross-site Scripting in Jfinal CMS
5.1.1
Affected by 0 other vulnerabilities.
VCID-82qu-67k6-efgs
Aliases:
CVE-2023-49395
GHSA-8hch-q86g-j38w
5.0.1
Affected by 1 other vulnerability.
VCID-b53k-vpxw-t3gh
Aliases:
CVE-2023-49375
GHSA-gfhv-xxqj-h323
5.0.1
Affected by 1 other vulnerability.
VCID-cryu-7dxb-5ygn
Aliases:
CVE-2023-49397
GHSA-5f56-h6fg-rcrh
5.0.1
Affected by 1 other vulnerability.
VCID-d7b4-d2ju-fkhj
Aliases:
CVE-2023-49487
GHSA-m42v-qv3c-h6j7
5.0.1
Affected by 1 other vulnerability.
VCID-f296-yvy3-5kf9
Aliases:
CVE-2023-49447
GHSA-32j2-c7mx-v4jj
5.0.1
Affected by 1 other vulnerability.
VCID-gjny-2bdr-x3hb
Aliases:
CVE-2023-49377
GHSA-r6mg-fq87-gw34
5.0.1
Affected by 1 other vulnerability.
VCID-mkjz-3rsc-qyd9
Aliases:
CVE-2023-50449
GHSA-7x2g-4jvc-4x6p
5.0.1
Affected by 1 other vulnerability.
VCID-mnj9-6xps-vfgs
Aliases:
CVE-2023-49372
GHSA-9wvj-wr2f-6mx6
5.0.1
Affected by 1 other vulnerability.
VCID-p847-h143-mbdf
Aliases:
CVE-2023-49382
GHSA-6v55-h6m5-2352
5.0.1
Affected by 1 other vulnerability.
VCID-pmnu-e15z-myhg
Aliases:
CVE-2023-49380
GHSA-765f-3mgx-24pw
5.0.1
Affected by 1 other vulnerability.
VCID-q29x-aunb-47am
Aliases:
CVE-2023-49379
GHSA-r2wj-mxvh-wqfh
5.0.1
Affected by 1 other vulnerability.
VCID-q45n-cyg9-97bw
Aliases:
CVE-2019-17352
GHSA-279p-pc38-xx4p
JFinal file validation vulnerability
4.4
Affected by 34 other vulnerabilities.
4.5
Affected by 34 other vulnerabilities.
VCID-rkvt-wtkj-7fbm
Aliases:
CVE-2023-49486
GHSA-hjfp-2j7q-xmx4
5.0.1
Affected by 1 other vulnerability.
VCID-s37r-ptss-euft
Aliases:
CVE-2023-49374
GHSA-r7w2-j96v-vw8m
5.0.1
Affected by 1 other vulnerability.
VCID-sxvz-rf3y-yuef
Aliases:
CVE-2023-49446
GHSA-hv4c-v8j8-54cw
5.0.1
Affected by 1 other vulnerability.
VCID-szda-c4tt-xfhk
Aliases:
CVE-2024-22496
GHSA-v435-pfj6-68r3
Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter.
5.0.1
Affected by 1 other vulnerability.
VCID-uexx-rhq8-gue1
Aliases:
CVE-2023-49378
GHSA-gw26-cchc-8f2f
5.0.1
Affected by 1 other vulnerability.
VCID-vjtk-sz1r-4yem
Aliases:
CVE-2023-49485
GHSA-f2w8-4m48-5qrq
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department.
5.0.1
Affected by 1 other vulnerability.
VCID-x5b2-ryqc-tyfk
Aliases:
CVE-2023-49448
GHSA-pv3g-vc3q-8c9g
5.0.1
Affected by 1 other vulnerability.
VCID-y9s5-n6we-byhn
Aliases:
CVE-2024-22493
GHSA-3j4x-9q9q-3277
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML.
5.0.1
Affected by 1 other vulnerability.
VCID-y9u5-hd6w-cbaz
Aliases:
CVE-2023-50101
GHSA-m3p6-43xj-pf9v
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.
5.0.1
Affected by 1 other vulnerability.
VCID-yekz-6x9y-23e4
Aliases:
CVE-2023-49383
GHSA-rq2q-hc6h-2px2
5.0.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:17:15.812837+00:00 GitLab Importer Affected by VCID-2nyn-zg2q-kbcy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2024-22497.yml 38.6.0
2026-06-12T19:17:10.063478+00:00 GitLab Importer Affected by VCID-szda-c4tt-xfhk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2024-22496.yml 38.6.0
2026-06-12T19:16:29.828236+00:00 GitLab Importer Affected by VCID-y9s5-n6we-byhn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2024-22493.yml 38.6.0
2026-06-12T19:16:28.351359+00:00 GitLab Importer Affected by VCID-5yzu-2p73-2yg4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2024-22492.yml 38.6.0
2026-06-12T19:13:57.127493+00:00 GitLab Importer Affected by VCID-1zbf-vz8c-6fdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-50102.yml 38.6.0
2026-06-12T19:13:55.420436+00:00 GitLab Importer Affected by VCID-y9u5-hd6w-cbaz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-50101.yml 38.6.0
2026-06-12T19:13:55.117847+00:00 GitLab Importer Affected by VCID-6xjf-nmwh-2ygb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-50100.yml 38.6.0
2026-06-12T19:13:49.993690+00:00 GitLab Importer Affected by VCID-27b9-9wd8-nqb1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-50137.yml 38.6.0
2026-06-12T19:13:13.484905+00:00 GitLab Importer Affected by VCID-mkjz-3rsc-qyd9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-50449.yml 38.6.0
2026-06-12T19:13:09.274648+00:00 GitLab Importer Affected by VCID-vjtk-sz1r-4yem https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49485.yml 38.6.0
2026-06-12T19:13:08.836187+00:00 GitLab Importer Affected by VCID-d7b4-d2ju-fkhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49487.yml 38.6.0
2026-06-12T19:13:08.424476+00:00 GitLab Importer Affected by VCID-rkvt-wtkj-7fbm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49486.yml 38.6.0
2026-06-12T19:12:59.500568+00:00 GitLab Importer Affected by VCID-gjny-2bdr-x3hb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49377.yml 38.6.0
2026-06-12T19:12:59.186458+00:00 GitLab Importer Affected by VCID-uexx-rhq8-gue1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49378.yml 38.6.0
2026-06-12T19:12:58.864548+00:00 GitLab Importer Affected by VCID-mnj9-6xps-vfgs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49372.yml 38.6.0
2026-06-12T19:12:58.583498+00:00 GitLab Importer Affected by VCID-5drm-1me6-6kcb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49398.yml 38.6.0
2026-06-12T19:12:58.296667+00:00 GitLab Importer Affected by VCID-45ur-b829-rbgv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49373.yml 38.6.0
2026-06-12T19:12:58.000770+00:00 GitLab Importer Affected by VCID-x5b2-ryqc-tyfk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49448.yml 38.6.0
2026-06-12T19:12:55.440847+00:00 GitLab Importer Affected by VCID-3nnf-d6rh-73gx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49396.yml 38.6.0
2026-06-12T19:12:55.161921+00:00 GitLab Importer Affected by VCID-sxvz-rf3y-yuef https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49446.yml 38.6.0
2026-06-12T19:12:54.874073+00:00 GitLab Importer Affected by VCID-p847-h143-mbdf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49382.yml 38.6.0
2026-06-12T19:12:54.587203+00:00 GitLab Importer Affected by VCID-q29x-aunb-47am https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49379.yml 38.6.0
2026-06-12T19:12:54.014920+00:00 GitLab Importer Affected by VCID-yekz-6x9y-23e4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49383.yml 38.6.0
2026-06-12T19:12:53.704878+00:00 GitLab Importer Affected by VCID-cryu-7dxb-5ygn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49397.yml 38.6.0
2026-06-12T19:12:53.306458+00:00 GitLab Importer Affected by VCID-82qu-67k6-efgs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49395.yml 38.6.0
2026-06-12T19:12:52.996579+00:00 GitLab Importer Affected by VCID-s37r-ptss-euft https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49374.yml 38.6.0
2026-06-12T19:12:52.719636+00:00 GitLab Importer Affected by VCID-354v-2fp3-gfdx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49381.yml 38.6.0
2026-06-12T19:12:51.665649+00:00 GitLab Importer Affected by VCID-pmnu-e15z-myhg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49380.yml 38.6.0
2026-06-12T19:12:50.933042+00:00 GitLab Importer Affected by VCID-5kw4-cjbh-1bdh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49376.yml 38.6.0
2026-06-12T19:12:49.174124+00:00 GitLab Importer Affected by VCID-f296-yvy3-5kf9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49447.yml 38.6.0
2026-06-12T19:12:48.087146+00:00 GitLab Importer Affected by VCID-b53k-vpxw-t3gh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2023-49375.yml 38.6.0
2026-06-12T18:26:52.797847+00:00 GitLab Importer Affected by VCID-82p1-qbvu-efeg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2022-33113.yml 38.6.0
2026-06-12T17:43:31.095225+00:00 GitLab Importer Affected by VCID-3fcp-e5ym-m7ha https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2021-31649.yml 38.6.0
2026-06-12T17:43:27.770510+00:00 GitLab Importer Affected by VCID-112z-vk29-mqfp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2021-33348.yml 38.6.0
2026-06-12T17:14:40.668586+00:00 GitLab Importer Affected by VCID-q45n-cyg9-97bw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.jfinal/jfinal/CVE-2019-17352.yml 38.6.0