JFinal kayıtları
jfinal üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-502 Deserialization of Untrusted Data1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-31649İstismar yok | In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code exjfinal · jfinal · CWE-502 | Kritik9,8 | — | %1,8 | 24 Haz 2021 |
39İzleyin | CVE-2021-31635İstismar yok | Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template fjfinal · jfinal · CWE-94 | Kritik9,8 | — | %1,2 | 26 Haz 2023 |
31İzleyin | CVE-2019-17352İstismar yok | In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload ajfinal · jfinal · CWE-434 | Yüksek7,5 | — | %1,7 | 8 Eki 2019 |
24İzleyin | CVE-2021-33348İstismar yok | An issue was discovered in JFinal framework v4.9.10 and below.jfinal · jfinal · CWE-79 | Orta6,1 | — | %0,6 | 24 Haz 2021 |
- CVE-2021-3164940Planlayın
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code ex
KritikCVSS 9,8İstismar yokEPSS %2jfinal · jfinal24 Haz 2021
- CVE-2021-3163539İzleyin
Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template f
KritikCVSS 9,8İstismar yokEPSS %1jfinal · jfinal26 Haz 2023
- CVE-2019-1735231İzleyin
In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload a
YüksekCVSS 7,5İstismar yokEPSS %2jfinal · jfinal8 Eki 2019
- CVE-2021-3334824İzleyin
An issue was discovered in JFinal framework v4.9.10 and below.
OrtaCVSS 6,1İstismar yokEPSS %1jfinal · jfinal24 Haz 2021