com.jfinal:jfinal-weixin (2.7), io.jboot:jboot (>=3.3.1, <=3.5.3) +1 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.01)

com.jfinal:jfinal MAVEN version 4.9.01 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-weixin 2.7 - io.jboot:jboot =3.3.1, =3.5.3 - net.dreamlu:mica-weixin 2.0.2 Source cves: CVE-2022-33113...

cn.benma666:sql-jfinal (>=3.30.7-release, <=3.30.11-release), com.ibeetl:sql-jfinal (>=3.1.1-release, <=3.40.2-release) +2 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.03)

com.jfinal:jfinal MAVEN version 4.9.03 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.benma666:sql-jfinal =3.30.7-release, =3.1.1-release, =3.6.0, =3.6.8 Source cves: CVE-2022-33113 Source advisory:...

cn.zcltd.btg:btg-httpsession (>=4.0.2, <=4.0.11), com.github.gaols:jfinal-springtx-plugin (2.0.2) +6 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (3.6)

com.jfinal:jfinal MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.zcltd.btg:btg-httpsession =4.0.2, =2.2, =2.0-rc.6, =1.3.3, =1.3.5 Source cves: CVE-2022-33113 Source advisory:...

com.github.treeleafj:xdoc-jfinal (1.1.0) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.1)

com.jfinal:jfinal MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.treeleafj:xdoc-jfinal 1.1.0 Source cves: CVE-2022-33113 Source advisory: OSV:GHSA-9PVQ-4CC7-24JG...

cn.eova:eova (>=1.6-beta2, <=1.6-beta3), cn.liangyuen:jfinal-slf4j (1.0) +7 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (3.2)

com.jfinal:jfinal MAVEN version 3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta2, =1.0, =1.3, =2.0.0, =1.0.0.v20180413-release, =1.0.0.v20180413-release, =2.0.0.v20170824-release,...

io.jboot:jboot (>=3.9.2, <=3.9.5) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.07)

com.jfinal:jfinal MAVEN version 4.9.07 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.9.2, =3.9.5 Source cves: CVE-2022-33113 Source advisory: OSV:GHSA-9PVQ-4CC7-24JG...

io.jboot:jboot (>=3.14.7, <=3.15.0) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.23)

com.jfinal:jfinal MAVEN version 4.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.14.7, =3.15.0 Source cves: CVE-2022-33113 Source advisory: OSV:GHSA-9PVQ-4CC7-24JG...

com.github.sunlin901203:sunny (>=0.0.1, <=0.0.4), com.ibeetl:beetl (>=2.2.5, <=2.7.5) +8 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (2.0)

com.jfinal:jfinal MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sunlin901203:sunny =0.0.1, =2.2.5, =1.0.0, =2.5, =1.3, =0.0.1, =0.0.1, =0.0.3 - net.xwzhou.commons:commons 0.0.2 -...

com.jfinal:jfinal-undertow (1.6), io.jboot:jboot (>=2.0, <=2.0.4) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (3.7)

com.jfinal:jfinal MAVEN version 3.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 1.6 - io.jboot:jboot =2.0, =2.0.4 Source cves: CVE-2022-33113 Source advisory: OSV:GHSA-9PVQ-4CC7-24...

Cross-site Scripting in Jfinal CMS

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...

cn.eova:eova-common (>=1.1.1, <=1.1.2-100801), cn.eova:eova-web (>=1.1.1, <=1.1.2-100801) +23 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (>=5.0.0, <=5.1.0)

com.jfinal:jfinal MAVEN version =5.0.0, =1.1.1, =1.1.1, =3.0, =2.10.1, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.12, =0.2.13 and more Source cves: CVE-2022-33113 Source advisory: GHSA-9PVQ-4CC7-24JG...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.2), cc.ecore:spring-jfinal-plus (>=0.1.1, <=0.1.2) +2 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (1.4)

com.jfinal:jfinal MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1, =1.0.10, =1.0.11 - com.jfinal:jfinal-ext 3.0.1 Source cves: CVE-2022-33113 Source...

com.github.sogyf:jfinal-app (0.0.9), org.beetl:beetl-core (>=2.0.2, <=2.2.3) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (1.6)

com.jfinal:jfinal MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sogyf:jfinal-app 0.0.9 - org.beetl:beetl-core =2.0.2, =2.2.3 Source cves: CVE-2022-33113 Source advisory:...

org.casbin:jcasbin-jfinal-plugin (>=1.0.0, <=1.1.0) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.11)

com.jfinal:jfinal MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - org.casbin:jcasbin-jfinal-plugin =1.0.0, =1.1.0 Source cves: CVE-2022-33113 Source advisory: OSV:GHSA-9PVQ-4CC7-24JG...

io.jboot:jboot (>=2.2.3, <=2.2.4) potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.6)

com.jfinal:jfinal MAVEN version 4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =2.2.3, =2.2.4 Source cves: CVE-2022-33113 Source advisory: OSV:GHSA-9PVQ-4CC7-24JG...

GHSA-9PVQ-4CC7-24JG Cross-site Scripting in Jfinal CMS

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...

com.jfinal:jfinal-weixin (2.9), com.jiubanqingchen:wish (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.05)

com.jfinal:jfinal MAVEN version 4.9.05 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-weixin 2.9 - com.jiubanqingchen:wish =0.0.1, =3.6.9, =2.0.4, =2.0.5 Source cves: CVE-2022-33113 Source...

cn.dreampie:jfinal-dreampie (>=1.0, <=1.2.2), cn.dreampie:jfinal-lesscss (0.1) +8 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (1.9)

com.jfinal:jfinal MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dreampie:jfinal-dreampie =1.0, =0.1, =0.1, =2.4.0, =3.1.3, =0.1, =0.0.1, =0.0.3 Source cves: CVE-2022-33113 Source advisory:...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2022-33113 Sour...

com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.15)

com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...