JFinalOA 安全漏洞

JFinalOA is an enterprise office system based on the JFinal framework developed by rabbit individual developers. A security vulnerability exists in JFinalOA versions prior to v2025.01.01, which stems from the discovery of an SQL injection vulnerability via the component validRoleKey?sysRole.key...

CVE-2023-21514

creationtimestamp| type| source ---|---|--- 2025-01-15 21:54:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1875...

CVE-2023-33255

creationtimestamp| type| source ---|---|--- 2025-01-15 20:54:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1858...

CVE-2024-36987

creationtimestamp| type| source ---|---|--- 2025-01-15 17:55:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1827...

CVE-2023-40594

creationtimestamp| type| source ---|---|--- 2025-01-15 17:55:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1825...

GHSA-CJFR-9F5R-3Q93

creationtimestamp| type| source ---|---|--- 2025-01-15 15:55:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1779...

GHSA-38X7-CC6W-J27Q

creationtimestamp| type| source ---|---|--- 2025-01-15 15:10:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1758...

CVE-2024-13334

creationtimestamp| type| source ---|---|--- 2025-01-15 04:14:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1699 2025-01-15 05:54:40+00:00| seen| https://t.me/cvedetector/15403...

CVE-2024-57762

creationtimestamp| type| source ---|---|--- 2025-01-15 01:44:05+00:00| seen| https://t.me/cvedetector/15400...

CVE-2024-57757

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:59+00:00| seen| https://t.me/cvedetector/15397...

CVE-2024-57766

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:58+00:00| seen| https://t.me/cvedetector/15395...

CVE-2024-57765

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:54+00:00| seen| https://t.me/cvedetector/15394...

CVE-2024-57764

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:53+00:00| seen| https://t.me/cvedetector/15393...

CVE-2025-22996

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:51+00:00| seen| https://t.me/cvedetector/15391 2025-01-15 16:54:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1806...

CVE-2025-22997

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:50+00:00| seen| https://t.me/cvedetector/15390 2025-01-15 16:54:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1807...

CVE-2024-54730

creationtimestamp| type| source ---|---|--- 2025-01-15 00:53:41+00:00| seen| https://t.me/cvedetector/15388...

CVE-2023-28253

creationtimestamp| type| source ---|---|--- 2025-01-15 00:18:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1663...

CVE-2023-28254

creationtimestamp| type| source ---|---|--- 2025-01-15 00:17:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1661...

CVE-2023-28256

creationtimestamp| type| source ---|---|--- 2025-01-15 00:15:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1657...

CVE-2024-57767

MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...