CVE-2022-30500

描述

Jfinal cms 5.1.0 is vulnerable to SQL Injection.

受影響套件(1)

• Maven/com.jflyfox:jflyfox_jfinalfrom 0, <= 5.1.0

參考連結(3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-30500
• PATCHhttps://github.com/jflyfox/jflyfox_jfinal
• WEBhttps://github.com/jflyfox/jfinal_cms/issues/35