CVE-2024-35085

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml...

CVE-2024-35085

J2EEFAST version 2.7.0 is vulnerable to a SQL injection vulnerability within the findPage function located in ProcessDefinitionMapper.xml . The root cause is a lack of validation for external input SQL statements, which could allow an attacker to execute unauthorized SQL commands and steal sensit...