CVE-2021-42242
First published: Thu May 05 2022(Updated: )
A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jflyfox Jfinal Cms | =5.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-42242?
The severity of CVE-2021-42242 is critical with a score of 9.8.
What is the affected software for CVE-2021-42242?
The affected software for CVE-2021-42242 is Jflyfox Jfinal Cms version 5.0.1.
How can I fix the command execution vulnerability in jfinal_cms 5.0.1 (CVE-2021-42242)?
To fix the command execution vulnerability in jfinal_cms 5.0.1 (CVE-2021-42242), upgrade to a secure version or apply the official patch provided by the vendor.
Are there any known exploits for CVE-2021-42242?
Yes, there are known exploits for CVE-2021-42242. It is important to take immediate action to protect vulnerable systems.
Where can I find more information about CVE-2021-42242?
You can find more information about CVE-2021-42242 at the following reference: https://github.com/jflyfox/jfinal_cms/issues/28
- collector/nvd-index
- vendor/jflyfox
- canonical/jflyfox jfinal cms
- version/jflyfox jfinal cms/5.0.1