jfinal_cms vulnerabilities

CVEs whose affected-version data names the jfinal_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2021-40639High· 7.5

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.

▾ Twilightjflyfox · jfinal_cmsEPSS 1.2%via NVD

jfinal_cms vulnerabilities (CVEs) · VulnSea