cn.fsdev:jfinal-mail-plugin (3.0), cn.yerl.web:spring-boot-starter-sso-client (1.0.0) +10 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (3.0)

com.jfinal:jfinal MAVEN version 3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.fsdev:jfinal-mail-plugin 3.0 - cn.yerl.web:spring-boot-starter-sso-client 1.0.0 - com.ejlchina:bean-searcher =1.1.1, =0.2,...

org.casbin:jcasbin-jfinal-plugin (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.11)

com.jfinal:jfinal MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - org.casbin:jcasbin-jfinal-plugin =1.0.0, =1.1.0 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...

cn.com.itez:jwinner-base (>=0.0.8, <=0.1.2), cn.com.itez:jwinner-core (>=0.0.8, <=0.1.2) +13 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (3.5)

com.jfinal:jfinal MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.com.itez:jwinner-base =0.0.8, =0.0.8, =0.0.8, =4.0.1, =1.0, =2018.9, =1.0, =1.7.0, =3.2.1.v20181024-release,...

cc.ecore:spring-jfinal (0.0.1), cn.codeforfun:jfinal-activemq (0.3) +24 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (2.2)

com.jfinal:jfinal MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.ecore:spring-jfinal 0.0.1 - cn.codeforfun:jfinal-activemq 0.3 - cn.codeforfun:jfinal-quartz 0.1 - cn.eova:eova =1.5.0, =2.2,...

com.ibeetl:jfinal4 (>=3.14.1.release, <=3.21.2.release), com.ibeetl:jfinal4-beetl-integration (1.0) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.0)

com.jfinal:jfinal MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.ibeetl:jfinal4 =3.14.1.release, =3.21.2.release - com.ibeetl:jfinal4-beetl-integration 1.0 Source cves: CVE-2024-22492 Sour...

cn.eova:eova (>=1.6-beta4, <=1.6-beta5), cn.zcltd.btg:btg-autoroute-jfinal (3.0.3) +11 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (3.3)

com.jfinal:jfinal MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta4, =1.0, =2.0.4, =1.0.0, =0.0.1, =2.0.2.v20171129-release, =2.2.0.v20180405-release Source cves:...

com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

cn.eova:eova (>=1.6-beta2, <=1.6-beta3), cn.liangyuen:jfinal-slf4j (1.0) +7 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (3.2)

com.jfinal:jfinal MAVEN version 3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta2, =1.0, =1.3, =2.0.0, =1.0.0.v20180413-release, =1.0.0.v20180413-release, =2.0.0.v20170824-release,...

io.jboot:jboot (>=3.9.11, <=3.9.12) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.10)

com.jfinal:jfinal MAVEN version 4.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.9.11, =3.9.12 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...

io.jboot:jboot (>=3.9.2, <=3.9.5) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.07)

com.jfinal:jfinal MAVEN version 4.9.07 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.9.2, =3.9.5 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...

com.github.treeleafj:xdoc-jfinal (1.1.0) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.1)

com.jfinal:jfinal MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.treeleafj:xdoc-jfinal 1.1.0 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

cn.zcltd.btg:btg-httpsession (>=4.0.2, <=4.0.11), com.github.gaols:jfinal-springtx-plugin (2.0.2) +6 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (3.6)

com.jfinal:jfinal MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.zcltd.btg:btg-httpsession =4.0.2, =2.2, =2.0-rc.6, =1.3.3, =1.3.5 Source cves: CVE-2024-22492 Source advisory:...

com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.15)

com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...

io.jboot:jboot (>=3.14.7, <=3.15.0) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.23)

com.jfinal:jfinal MAVEN version 4.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.14.7, =3.15.0 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...

io.jboot:jboot (>=3.14.1, <=3.14.3) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.21)

com.jfinal:jfinal MAVEN version 4.9.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.14.1, =3.14.3 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...

com.github.subchen:jetbrick-template (>=1.0.0, <=1.2.6), com.github.zqq90.webit-script:webit-script (>=1.2.2, <=1.4.0) +3 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (1.5)

com.jfinal:jfinal MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.subchen:jetbrick-template =1.0.0, =1.2.2, =1.4.1, =2.0.0-beta, =2.7.0-beta Source cves: CVE-2024-22492 Source...

CVE-2024-22492

CVE-2024-22492 describes a stored XSS vulnerability in JFinalCMS 5.0.0. The issue is exploitable via the /gusetbook/save contact parameter, allowing remote attackers to inject arbitrary web script or HTML. The CVE entry notes a network-based vector with low attack complexity and requires user int...