CVE-2023-50102

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

io.jboot:jboot (>=3.13.5, <=3.14.0) potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.18)

com.jfinal:jfinal MAVEN version 4.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.13.5, =3.14.0 Source cves: CVE-2023-50102 Source advisory: OSV:GHSA-P3PH-6245-4WFC...

io.jboot:jboot (>=2.2.3, <=2.2.4) potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.6)

com.jfinal:jfinal MAVEN version 4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =2.2.3, =2.2.4 Source cves: CVE-2023-50102 Source advisory: OSV:GHSA-P3PH-6245-4WFC...

cn.eova:eova (>=1.6-beta6, <=1.6.0), cn.zcltd.btg:btg-autoroute-jfinal (3.0.4) +12 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.4)

com.jfinal:jfinal MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta6, =0.0.2, =3.0.1, =1.3.0, =1.0.0, =2.3.0.v20180506-release, =2.3.0.v20180506-release,...

cn.fsdev:jfinal-mail-plugin (3.0), cn.yerl.web:spring-boot-starter-sso-client (1.0.0) +10 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.0)

com.jfinal:jfinal MAVEN version 3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.fsdev:jfinal-mail-plugin 3.0 - cn.yerl.web:spring-boot-starter-sso-client 1.0.0 - com.ejlchina:bean-searcher =1.1.1, =0.2,...

com.github.jieblog:jfinal-shiro (>=1.0, <=3.1.0), com.github.piaohao:act-jfinal (1.0) +9 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.1)

com.jfinal:jfinal MAVEN version 3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.jieblog:jfinal-shiro =1.0, =1.0-alpha2, =1.5.3, =1.0.0, =1.8.0, =1.8.2 Source cves: CVE-2023-50102 Source advisory:...

cn.eova:eova (>=1.6-beta2, <=1.6-beta3), cn.liangyuen:jfinal-slf4j (1.0) +7 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.2)

com.jfinal:jfinal MAVEN version 3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta2, =1.0, =1.3, =2.0.0, =1.0.0.v20180413-release, =1.0.0.v20180413-release, =2.0.0.v20170824-release,...

cn.eova:eova (>=1.6-beta4, <=1.6-beta5), cn.zcltd.btg:btg-autoroute-jfinal (3.0.3) +11 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.3)

com.jfinal:jfinal MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta4, =1.0, =2.0.4, =1.0.0, =0.0.1, =2.0.2.v20171129-release, =2.2.0.v20180405-release Source cves:...

com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=1.2.0, <=1.2.3), com.github.xiaoymin:knife4j-jfinal (>=2.0.4, <=3.0.3) +3 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.2)

com.jfinal:jfinal MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =1.2.0, =2.0.4, =3.0.3, =2.1.1, =3.3.3.v20190620-release,...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

io.jboot:jboot (>=3.9.2, <=3.9.5) potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.07)

com.jfinal:jfinal MAVEN version 4.9.07 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.9.2, =3.9.5 Source cves: CVE-2023-50102 Source advisory: OSV:GHSA-P3PH-6245-4WFC...

org.casbin:jcasbin-jfinal-plugin (>=1.0.0, <=1.1.0) potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.11)

com.jfinal:jfinal MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - org.casbin:jcasbin-jfinal-plugin =1.0.0, =1.1.0 Source cves: CVE-2023-50102 Source advisory: OSV:GHSA-P3PH-6245-4WFC...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2023-50102 Sour...

com.jfinal:jfinal-undertow (2.7), com.jfinal:jfinal-weixin (3.4) +1 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.16)

com.jfinal:jfinal MAVEN version 4.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.7 - com.jfinal:jfinal-weixin 3.4 - net.dreamlu:jfinal-event 3.1.3 Source cves: CVE-2023-50102...

com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=3.6.11, <=3.6.16), io.github.bes2008.solution.sqlhelper:sqlhelper-jfinal (>=4.0.0, <=6.0.0) +1 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.20)

com.jfinal:jfinal MAVEN version 4.9.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =3.6.11, =4.0.0, =6.0.1, =6.0.6 Source cves: CVE-2023-50102 Source advisory:...

cn.com.itez:jwinner-base (>=0.0.8, <=0.1.2), cn.com.itez:jwinner-core (>=0.0.8, <=0.1.2) +13 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.5)

com.jfinal:jfinal MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.com.itez:jwinner-base =0.0.8, =0.0.8, =0.0.8, =4.0.1, =1.0, =2018.9, =1.0, =1.7.0, =3.2.1.v20181024-release,...

cn.zcltd.btg:btg-httpsession (>=4.0.2, <=4.0.11), com.github.gaols:jfinal-springtx-plugin (2.0.2) +6 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.6)

com.jfinal:jfinal MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.zcltd.btg:btg-httpsession =4.0.2, =2.2, =2.0-rc.6, =1.3.3, =1.3.5 Source cves: CVE-2023-50102 Source advisory:...

cc.ecore:spring-jfinal (0.0.1), cn.codeforfun:jfinal-activemq (0.3) +24 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (2.2)

com.jfinal:jfinal MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.ecore:spring-jfinal 0.0.1 - cn.codeforfun:jfinal-activemq 0.3 - cn.codeforfun:jfinal-quartz 0.1 - cn.eova:eova =1.5.0, =2.2,...

com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal (3.0.5), com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=3.1.1, <=3.6.10) +8 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9)

com.jfinal:jfinal MAVEN version 4.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal 3.0.5 - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =3.1....

cc.jweb:jweb-boot (>=1.0.0, <=1.0.1), com.ejlchina:bean-searcher (2.0.1) +10 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.06)

com.jfinal:jfinal MAVEN version 4.9.06 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.jweb:jweb-boot =1.0.0, =1.0.0, =1.0.3, =1.0.3, =1.0.3, =3.8.0, =3.9.1 Source cves: CVE-2023-50102 Source advisory:...