CVE-2023-49372

creationtimestamp| type| source ---|---|--- 2023-12-24 14:31:38+00:00| seen| https://t.me/ctinow/159024...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.jfinal:jfinal-undertow (2.5), com.jfinal:jfinal-weixin (>=3.0, <=3.1) +2 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9.08)

com.jfinal:jfinal MAVEN version 4.9.08 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.5 - com.jfinal:jfinal-weixin =3.0, =3.9.6, =2.0.6, =2.1.0 Source cves: CVE-2023-49372 Source...

com.jfinal:jfinal-undertow (2.7), com.jfinal:jfinal-weixin (3.4) +1 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9.16)

com.jfinal:jfinal MAVEN version 4.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.7 - com.jfinal:jfinal-weixin 3.4 - net.dreamlu:jfinal-event 3.1.3 Source cves: CVE-2023-49372...

com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal (3.0.5), com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=3.1.1, <=3.6.10) +8 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9)

com.jfinal:jfinal MAVEN version 4.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal 3.0.5 - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =3.1....

cn.benma666:sql-jfinal (>=3.30.7-release, <=3.30.11-release), com.ibeetl:sql-jfinal (>=3.1.1-release, <=3.40.2-release) +2 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9.03)

com.jfinal:jfinal MAVEN version 4.9.03 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.benma666:sql-jfinal =3.30.7-release, =3.1.1-release, =3.6.0, =3.6.8 Source cves: CVE-2023-49372 Source advisory:...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-49372 Source...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2023-49372 Source...

cn.zcltd.btg:btg-httpsession (>=4.0.2, <=4.0.11), com.github.gaols:jfinal-springtx-plugin (2.0.2) +6 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (3.6)

com.jfinal:jfinal MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.zcltd.btg:btg-httpsession =4.0.2, =2.2, =2.0-rc.6, =1.3.3, =1.3.5 Source cves: CVE-2023-49372 Source advisory:...

cn.51daxia:zzz-websocket (>=1.0, <=1.1), com.github.grtechtv:enjoy-mapper (1.0.0) +17 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (3.8)

com.jfinal:jfinal MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.51daxia:zzz-websocket =1.0, =1.1 - com.github.grtechtv:enjoy-mapper 1.0.0 -...

cc.jweb:jweb-adai (>=1.0.2, <=1.0.6), cc.jweb:jweb-boot (>=1.0.2, <=1.0.5) +1 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9.09)

com.jfinal:jfinal MAVEN version 4.9.09 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.jweb:jweb-adai =1.0.2, =1.0.2, =3.9.9, =3.9.10 Source cves: CVE-2023-49372 Source advisory: OSV:GHSA-9WVJ-WR2F-6MX6...

com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=1.2.0, <=1.2.3), com.github.xiaoymin:knife4j-jfinal (>=2.0.4, <=3.0.3) +3 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.2)

com.jfinal:jfinal MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =1.2.0, =2.0.4, =3.0.3, =2.1.1, =3.3.3.v20190620-release,...

org.casbin:jcasbin-jfinal-plugin (>=1.0.0, <=1.1.0) potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9.11)

com.jfinal:jfinal MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - org.casbin:jcasbin-jfinal-plugin =1.0.0, =1.1.0 Source cves: CVE-2023-49372 Source advisory: OSV:GHSA-9WVJ-WR2F-6MX6...

cc.ecore:spring-jfinal (0.0.1), cn.codeforfun:jfinal-activemq (0.3) +24 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (2.2)

com.jfinal:jfinal MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.ecore:spring-jfinal 0.0.1 - cn.codeforfun:jfinal-activemq 0.3 - cn.codeforfun:jfinal-quartz 0.1 - cn.eova:eova =1.5.0, =2.2,...

com.ibeetl:jfinal4 (>=3.14.1.release, <=3.21.2.release), com.ibeetl:jfinal4-beetl-integration (1.0) potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.0)

com.jfinal:jfinal MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.ibeetl:jfinal4 =3.14.1.release, =3.21.2.release - com.ibeetl:jfinal4-beetl-integration 1.0 Source cves: CVE-2023-49372 Sour...

com.github.treeleafj:xdoc-jfinal (1.1.0) potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.1)

com.jfinal:jfinal MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.treeleafj:xdoc-jfinal 1.1.0 Source cves: CVE-2023-49372 Source advisory: OSV:GHSA-9WVJ-WR2F-6MX6...

cn.eova:eova (>=1.6-beta6, <=1.6.0), cn.zcltd.btg:btg-autoroute-jfinal (3.0.4) +12 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (3.4)

com.jfinal:jfinal MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta6, =0.0.2, =3.0.1, =1.3.0, =1.0.0, =2.3.0.v20180506-release, =2.3.0.v20180506-release,...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.github.subchen:jetbrick-template (>=1.0.0, <=1.2.6), com.github.zqq90.webit-script:webit-script (>=1.2.2, <=1.4.0) +3 more potentially affected by CVE-2023-49372 via com.jfinal:jfinal (1.5)

com.jfinal:jfinal MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.subchen:jetbrick-template =1.0.0, =1.2.2, =1.4.1, =2.0.0-beta, =2.7.0-beta Source cves: CVE-2023-49372 Source...

io.jboot:jboot (>=3.9.11, <=3.9.12) potentially affected by CVE-2023-49372 via com.jfinal:jfinal (4.9.10)

com.jfinal:jfinal MAVEN version 4.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.9.11, =3.9.12 Source cves: CVE-2023-49372 Source advisory: OSV:GHSA-9WVJ-WR2F-6MX6...