Lucene search
+L

3 matches found

Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.9 views

PT-2024-26315 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within BpmTaskFromMapper.xml. Recommendations: For version 2.7.0, consider restricting access to the findPage function in BpmTaskFromMapper.xml until...

9.8CVSS8.3AI score0.00534EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.7 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the BpmTaskFromMapper.xml findPage...

9.8CVSS8.2AI score0.00534EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/05/07 12:0 a.m.8 views

PT-2024-25129 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the sql filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml. This allows for potential exploitation. No information is provided about the...

8.8CVSS8AI score0.00536EPSS
SaveExploits0References4
Rows per page
Query Builder