CVE-2021-40645

2022-03-3020:56:16

mitre

www.cve.org

sql injection

glorylion jfinaloa

defkey parameter

flowtaskcontroller

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

30.4%

JSON

An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.

References

gitee.com/glorylion/JFinalOA

github.com/novysodope/VulReq/blob/main/JFinalOA