Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05028
HistoryDec 19, 2021 - 12:00 a.m.

jfinal denial of service vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

32.4%

JFinal is a Java language based WEB ORM open source framework. jFinal cms in versions prior to 5.1.0 there is a denial of service vulnerability , the vulnerability stems from the application of regular expressions on the insecure handling of user input , the attacker can use the vulnerability specially requested to trigger a denial of service attack .

CPENameOperatorVersion
jfinal jfinallt5.1.0

0.001 Low

EPSS

Percentile

32.4%

Related for CNVD-2022-05028