CVE-2021-40639

2021-09-1522:15:10

Google

osv.dev

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.1%

JSON

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.

CPENameOperatorVersion
jfinal_cmseq3.1.1
jfinal_cmseq4.1.2
jfinal_cmseq3.1.0
jfinal_cmseq4.7.0
jfinal_cmseq5.1.0
jfinal_cmseq4.5.0
jfinal_cmseq4.0.0
jfinal_cmseq2.9.2
jfinal_cmseq2.0.0
jfinal_cmseq4.1.5

Name	Operator	Version
jfinal_cms	eq	3.1.1
jfinal_cms	eq	4.1.2
jfinal_cms	eq	3.1.0
jfinal_cms	eq	4.7.0
jfinal_cms	eq	5.1.0
jfinal_cms	eq	4.5.0
jfinal_cms	eq	4.0.0
jfinal_cms	eq	2.9.2
jfinal_cms	eq	2.0.0
jfinal_cms	eq	4.1.5