Description
Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.
Remediation
References
https://github.com/jfinal/jfinal/issues/187
Related Vulnerabilities
CVE-2021-32660 Vulnerability in npm package techdocs-common
CVE-2022-25842 Vulnerability in maven package com.alibaba.oneagent:one-java-agent-plugin
CVE-2020-28440 Vulnerability in npm package corenlp-js-interface
CVE-2019-19771 Vulnerability in npm package baes-x
CVE-2021-27807 Vulnerability in maven package org.apache.pdfbox:pdfbox