Vulnerabilities

TI-2024-11458 CVE-2024-12351 · GHSA-38h9-g2p9-689w

JFinalCMS File Content ContentModel.java findPage sql injection

MEDIUM 57

A vulnerability classified as critical has been found in JFinalCMS 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00532 Published 2024-12-09 No fix listed CWE-74

TI-2024-11457 CVE-2024-12350 · GHSA-rvc2-xvxc-m9fw

MEDIUM 57

A vulnerability was found in JFinalCMS 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03741 Published 2024-12-09 No fix listed CWE-74

TI-2024-11456 CVE-2024-12349 · GHSA-v8vc-6766-vww4

MEDIUM 64

A vulnerability was found in JFinalCMS 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00364 Published 2024-12-09 No fix listed CWE-352