com.jfinal:jfinal (Maven)
Advisories
36
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 4.9.11 or later clears every advisory below that has a fix.
Upgrade commands
maven
<dependency><groupId>com.jfinal</groupId><artifactId>jfinal</artifactId><version>4.9.11</version></dependency>gradle
implementation("com.jfinal:jfinal:4.9.11")Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-qh2w-9m7w-hjg2 Cross-site Scripting in JFinal |
Medium EPSS 0.43% |
<= 5.0.0 | No fix yet |
| GHSA-v435-pfj6-68r3 Cross-site Scripting in JFinal |
Medium EPSS 0.43% |
<= 5.0.0 | No fix yet |
| GHSA-3j4x-9q9q-3277 Cross-site Scripting in JFinal |
Medium EPSS 0.56% |
<= 5.0.0 | No fix yet |
| GHSA-859h-4w58-78xw Cross-site Scripting in JFinal |
Medium EPSS 0.56% |
<= 5.0.0 | No fix yet |
| GHSA-xv7p-jw46-8r85 Cross-site Scripting in JFinalcms |
Medium EPSS 0.46% |
<= 5.0.0 | No fix yet |
| GHSA-p3ph-6245-4wfc Cross-site Scripting in JFinalcms |
Medium EPSS 0.43% |
<= 5.0.0 | No fix yet |
| GHSA-m3p6-43xj-pf9v Cross-site Scripting in JFinalcms |
Medium EPSS 0.44% |
<= 5.0.0 | No fix yet |
| GHSA-3hf6-f8ch-5869 Cross-site Scripting in JFinalcms |
Medium EPSS 0.44% |
<= 5.0.0 | No fix yet |
| GHSA-7x2g-4jvc-4x6p Directory Traversal in JFinalCMS |
High EPSS 1.21% |
<= 5.0.0 | No fix yet |
| GHSA-m42v-qv3c-h6j7 Cross-site Scripting in JFinalCMS |
Medium EPSS 0.41% |
<= 5.0.0 | No fix yet |
| GHSA-hjfp-2j7q-xmx4 Cross-site Scripting in JFinalCMS |
Medium EPSS 0.42% |
<= 5.0.0 | No fix yet |
| GHSA-f2w8-4m48-5qrq Cross-site Scripting in JFinalCMS |
Medium EPSS 0.41% |
<= 5.0.0 | No fix yet |
| GHSA-pv3g-vc3q-8c9g Cross-Site Request Forgery in JFinalCMS via admin/nav/delete |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-32j2-c7mx-v4jj Cross-Site Request Forgery in JFinalCMS via /admin/nav/update |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-hv4c-v8j8-54cw Cross-Site Request Forgery in JFinalCMS via /admin/nav/save |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-mwvq-gc5w-m78f Cross-Site Request Forgery in JFinalCMS via /admin/category/delete |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-5f56-h6fg-rcrh Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-882g-gjqp-9vjp Cross-Site Request Forgery in JFinalCMS via /admin/category/save |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-8hch-q86g-j38w Cross-Site Request Forgery in JFinalCMS via /admin/category/update |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-rq2q-hc6h-2px2 Cross-Site Request Forgery in JFinalCMS via /admin/tag/save |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-6v55-h6m5-2352 Cross-Site Request Forgery in JFinalCMS via /admin/div/delete |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-r222-mcff-27ff Cross-Site Request Forgery in JFinalCMS via /admin/div/update |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-765f-3mgx-24pw Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/delete |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-r2wj-mxvh-wqfh Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save |
High EPSS 0.40% |
<= 5.0.0 | No fix yet |
| GHSA-gw26-cchc-8f2f Cross-Site Request Forgery in JFinalCMS via /admin/form/save |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-r6mg-fq87-gw34 Cross-Site Request Forgery in JFinalCMS via /admin/tag/update |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-w492-7g9m-j2ww Cross-Site Request Forgery in JFinalCMS |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-gfhv-xxqj-h323 Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/update |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-r7w2-j96v-vw8m Cross-Site Request Forgery in JFinalCMS via /admin/slide/update |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-cj7j-23wf-mhrx Cross-Site Request Forgery in JFinalCMS |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-9wvj-wr2f-6mx6 Cross-Site Request Forgery in JFinalCMS |
High EPSS 0.39% |
<= 5.0.0 | No fix yet |
| GHSA-cgmm-c2m9-ff7r jFinal Server-Side Template Injection vulnerability |
Critical EPSS 1.21% |
<= 4.9.08 | No fix yet |
| GHSA-9pvq-4cc7-24jg Cross-site Scripting in Jfinal CMS |
Medium EPSS 0.51% |
<= 5.1.0 | No fix yet |
| GHSA-279p-pc38-xx4p JFinal file validation vulnerability |
High EPSS 1.74% |
< 4.5 | 4.5 |
| GHSA-h3j8-fr5q-8rfr JFinal Java Deserialization Vulnerability |
Critical EPSS 1.82% |
<= 4.9.08 | No fix yet |
| GHSA-2c25-xfpq-8w9r Cross-site scripting in jfinal |
Medium EPSS 0.64% |
< 4.9.11 | 4.9.11 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor