com.jfinal:jfinal-weixin (2.9), com.jiubanqingchen:wish (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.9.05)

com.jfinal:jfinal MAVEN version 4.9.05 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-weixin 2.9 - com.jiubanqingchen:wish =0.0.1, =3.6.9, =2.0.4, =2.0.5 Source cves: CVE-2024-22496 Source...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.2), cc.ecore:spring-jfinal-plus (>=0.1.1, <=0.1.2) +2 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (1.4)

com.jfinal:jfinal MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1, =1.0.10, =1.0.11 - com.jfinal:jfinal-ext 3.0.1 Source cves: CVE-2024-22496 Source...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

io.jboot:jboot (>=3.13.5, <=3.14.0) potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.9.18)

com.jfinal:jfinal MAVEN version 4.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.13.5, =3.14.0 Source cves: CVE-2024-22496 Source advisory: OSV:GHSA-V435-PFJ6-68R3...

org.casbin:jcasbin-jfinal-plugin (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.9.11)

com.jfinal:jfinal MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - org.casbin:jcasbin-jfinal-plugin =1.0.0, =1.1.0 Source cves: CVE-2024-22496 Source advisory: OSV:GHSA-V435-PFJ6-68R3...

cn.dreampie:jfinal-dreampie (>=1.0, <=1.2.2), cn.dreampie:jfinal-lesscss (0.1) +8 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (1.9)

com.jfinal:jfinal MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dreampie:jfinal-dreampie =1.0, =0.1, =0.1, =2.4.0, =3.1.3, =0.1, =0.0.1, =0.0.3 Source cves: CVE-2024-22496 Source advisory:...

com.github.sogyf:jfinal-app (0.0.9), org.beetl:beetl-core (>=2.0.2, <=2.2.3) potentially affected by CVE-2024-22496 via com.jfinal:jfinal (1.6)

com.jfinal:jfinal MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sogyf:jfinal-app 0.0.9 - org.beetl:beetl-core =2.0.2, =2.2.3 Source cves: CVE-2024-22496 Source advisory:...

io.jboot:jboot (>=3.9.2, <=3.9.5) potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.9.07)

com.jfinal:jfinal MAVEN version 4.9.07 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - io.jboot:jboot =3.9.2, =3.9.5 Source cves: CVE-2024-22496 Source advisory: OSV:GHSA-V435-PFJ6-68R3...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2024-22496 Sour...

com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal (3.0.5), com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=3.1.1, <=3.6.10) +8 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.9)

com.jfinal:jfinal MAVEN version 4.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal 3.0.5 - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =3.1....

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2024-22496 Source...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

cn.dreampie:jfinal-akka (0.1), cn.dreampie:jfinal-captcha (0.1) +16 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (1.8)

com.jfinal:jfinal MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dreampie:jfinal-akka 0.1 - cn.dreampie:jfinal-captcha 0.1 - cn.dreampie:jfinal-coffeescript 0.1 - cn.dreampie:jfinal-dreampi...

com.jfinal:jfinal-undertow (2.7), com.jfinal:jfinal-weixin (3.4) +1 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.9.16)

com.jfinal:jfinal MAVEN version 4.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.7 - com.jfinal:jfinal-weixin 3.4 - net.dreamlu:jfinal-event 3.1.3 Source cves: CVE-2024-22496...

com.ibeetl:jfinal4 (>=3.14.1.release, <=3.21.2.release), com.ibeetl:jfinal4-beetl-integration (1.0) potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.0)

com.jfinal:jfinal MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.ibeetl:jfinal4 =3.14.1.release, =3.21.2.release - com.ibeetl:jfinal4-beetl-integration 1.0 Source cves: CVE-2024-22496 Sour...

JFinal Cross-Site Scripting Vulnerability

JFinal is a Java language based WEB + ORM open source framework. A cross-site scripting vulnerability exists in JFinal version 5.0.0, which originates from allowing an attacker to run arbitrary code via the /admin/login username parameter...

JFinal Cross-Site Scripting Vulnerability

JFinal is a Java language based WEB + ORM open source framework. A cross-site scripting vulnerability exists in JFinal version 5.0.0, which originates from allowing an attacker to run arbitrary code via the /admin/login password parameter...

com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=1.2.0, <=1.2.3), com.github.xiaoymin:knife4j-jfinal (>=2.0.4, <=3.0.3) +3 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.2)

com.jfinal:jfinal MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =1.2.0, =2.0.4, =3.0.3, =2.1.1, =3.3.3.v20190620-release,...

org.casbin:jcasbin-jfinal-plugin (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.9.11)

com.jfinal:jfinal MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - org.casbin:jcasbin-jfinal-plugin =1.0.0, =1.1.0 Source cves: CVE-2024-22492 Source advisory: OSV:GHSA-859H-4W58-78XW...