CVE-2024-40322

The CVE-2024-40322 entry describes a SQL injection in JFinalCMS v5.0.0 exposed at the /admin/div_data/data API. Veracode notes improper input validation in DivDataController#data, enabling arbitrary SQL via manipulation of the tableName field in a custom div object. Red Hat/OSV and CVE databases ...