Lucene search
+L

5 matches found

NVD
NVD
•added 2024/12/02 9:15 p.m.•41 views

CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...

9.8CVSS0.00878EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/02 12:00 a.m.•134 views

CVE-2024-53477

JFinal CMS version 5.1.0 is vulnerable to Command Execution due to the unauthorized execution of deserialization within the ApiForm.java file (CWE-502). An attacker can exploit this flaw to execute arbitrary commands on the system. As a temporary workaround, it is recommended to disable deseriali...

9.8CVSS6.9AI score0.00878EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/12/02 12:00 a.m.•40 views

CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...

0.00878EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•4 views

CVE-2024-53477: Deserialization of Untrusted Data

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...

9.8CVSS5.9AI score0.00878EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/02 12:00 a.m.•12 views

CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...

9.8CVSS7.4AI score
SaveExploits0References4
Rows per page
Query Builder