CVE-2024-35082

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...

CVE-2024-35082

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...

CVE-2024-35082

The J2EEFAST Java EE enterprise-class rapid development platform, specifically version 2.7.0 , is vulnerable to a SQL injection vulnerability. The root cause is the findPage function within the SysOperLogMapper.xml file, which lacks proper validation for external input SQL statements. An attacker...