SQL injection in jflyfox jfinal

GHSA ID

GHSA-595x-hh6c-hfv8

CVE ID

CVE-2022-30500

Severity

high

Published

2022-05-27T00:00:48Z

Updated

2023-01-27T05:03:05Z

Description

CWEs

• CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-30500 ↗
• https://github.com/jflyfox/jfinal_cms/issues/35 ↗
• https://github.com/advisories/GHSA-595x-hh6c-hfv8 ↗