CVE-2022-38286: SQL Injection
First published: Fri Sep 09 2022(Updated: )
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jflyfox Jfinal Cms | =5.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-38286?
CVE-2022-38286 is a vulnerability in JFinal CMS 5.1.0 that allows SQL Injection via the /system/role/list endpoint.
How severe is CVE-2022-38286?
CVE-2022-38286 has a severity rating of 7.2, which is considered high.
How does CVE-2022-38286 affect JFinal CMS 5.1.0?
CVE-2022-38286 affects JFinal CMS 5.1.0 by allowing SQL Injection through the /system/role/list endpoint.
How can I fix CVE-2022-38286 in JFinal CMS 5.1.0?
To fix CVE-2022-38286 in JFinal CMS 5.1.0, you should update to a version that includes the fix.
Where can I find more information about CVE-2022-38286?
You can find more information about CVE-2022-38286 at the following reference link: <https://github.com/jflyfox/jfinal_cms/issues/52>
- collector/nvd-index
- vendor/jflyfox
- canonical/jflyfox jfinal cms
- version/jflyfox jfinal cms/5.1.0