Description

Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.

Remediation

References

https://github.com/jfinal/jfinal/issues/187

Related Vulnerabilities

CVE-2023-22457 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-plugins

CVE-2020-13956 Vulnerability in maven package org.apache.httpcomponents.client5:httpclient5

CVE-2023-49656 Vulnerability in maven package org.jenkins-ci.plugins:matlab

CVE-2023-40350 Vulnerability in maven package org.jenkins-ci.plugins:docker-swarm

CVE-2019-19771 Vulnerability in npm package colne

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Issue Tracking Third Party Advisory NVD-CWE-Other