com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2024-22493 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

com.github.jieblog:jfinal-shiro (>=1.0, <=3.1.0), com.github.piaohao:act-jfinal (1.0) +9 more potentially affected by CVE-2024-22493 via com.jfinal:jfinal (3.1)

com.jfinal:jfinal MAVEN version 3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.jieblog:jfinal-shiro =1.0, =1.0-alpha2, =1.5.3, =1.0.0, =1.8.0, =1.8.2 Source cves: CVE-2024-22493 Source advisory:...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2024-22493 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

Cross-site Scripting in JFinal

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML...

cn.eova:eova (>=1.6-beta6, <=1.6.0), cn.zcltd.btg:btg-autoroute-jfinal (3.0.4) +12 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (3.4)

com.jfinal:jfinal MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta6, =0.0.2, =3.0.1, =1.3.0, =1.0.0, =2.3.0.v20180506-release, =2.3.0.v20180506-release,...

Cross Site Scripting (XSS)

com.jfinal:jfinal is vulnerable to Cross-site Scripting XSS. The vulnerability occurs due to insufficient user input sanitizations, which allows an authenticated attacker to inject and execute malicious javascript into the victim's browser...

Cross Site Scripting (XSS)

com.jfinal:jfinal is vulnerable to Cross-site Scripting XSS. Lack of proper validation for user input within the library's label management feature, exposes a Cross-Site Scripting XSS vulnerability which allows an authenticated attacker to inject malicious scripts into labels, which are then...

cn.51daxia:zzz-websocket (>=1.0, <=1.1), com.github.grtechtv:enjoy-mapper (1.0.0) +17 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (3.8)

com.jfinal:jfinal MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.51daxia:zzz-websocket =1.0, =1.1 - com.github.grtechtv:enjoy-mapper 1.0.0 -...

com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

com.github.sunlin901203:sunny (>=0.0.1, <=0.0.4), com.ibeetl:beetl (>=2.2.5, <=2.7.5) +8 more potentially affected by CVE-2023-50101 via com.jfinal:jfinal (2.0)

com.jfinal:jfinal MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sunlin901203:sunny =0.0.1, =2.2.5, =1.0.0, =2.5, =1.3, =0.0.1, =0.0.1, =0.0.3 - net.xwzhou.commons:commons 0.0.2 -...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-50101 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2023-50137 Source...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2023-50101 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

com.github.subchen:jetbrick-template (>=1.0.0, <=1.2.6), com.github.zqq90.webit-script:webit-script (>=1.2.2, <=1.4.0) +3 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (1.5)

com.jfinal:jfinal MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.subchen:jetbrick-template =1.0.0, =1.2.2, =1.4.1, =2.0.0-beta, =2.7.0-beta Source cves: CVE-2023-50102 Source...

com.github.jieblog:jfinal-shiro (>=1.0, <=3.1.0), com.github.piaohao:act-jfinal (1.0) +9 more potentially affected by CVE-2023-50100 via com.jfinal:jfinal (3.1)

com.jfinal:jfinal MAVEN version 3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.jieblog:jfinal-shiro =1.0, =1.0-alpha2, =1.5.3, =1.0.0, =1.8.0, =1.8.2 Source cves: CVE-2023-50100 Source advisory:...

cn.51daxia:zzz-websocket (>=1.0, <=1.1), com.github.grtechtv:enjoy-mapper (1.0.0) +17 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (3.8)

com.jfinal:jfinal MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.51daxia:zzz-websocket =1.0, =1.1 - com.github.grtechtv:enjoy-mapper 1.0.0 -...

com.github.sogyf:jfinal-app (0.0.9), org.beetl:beetl-core (>=2.0.2, <=2.2.3) potentially affected by CVE-2023-50100 via com.jfinal:jfinal (1.6)

com.jfinal:jfinal MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sogyf:jfinal-app 0.0.9 - org.beetl:beetl-core =2.0.2, =2.2.3 Source cves: CVE-2023-50100 Source advisory:...

com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=3.6.11, <=3.6.16), io.github.bes2008.solution.sqlhelper:sqlhelper-jfinal (>=4.0.0, <=6.0.0) +1 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.9.20)

com.jfinal:jfinal MAVEN version 4.9.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =3.6.11, =4.0.0, =6.0.1, =6.0.6 Source cves: CVE-2023-50137 Source advisory:...

cn.dev33:sa-token-jboot-plugin (>=1.30.0.rc, <=1.31.2.temp), com.jfinal:jfinal-undertow (2.9) +2 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.9.22)

com.jfinal:jfinal MAVEN version 4.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.30.0.rc, =1.0.1, =3.14.4, =3.14.6 Source cves: CVE-2023-50137 Source advisory:...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2023-50101 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2023-50101 Sour...