Maven/com.jflyfox:jflyfox_jfinal CVE-2022-29648: medium 5.4, EPSS 0.51%
Cross site scripting in Jfinal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8rp2-j3vj-hgj4
- https://nvd.nist.gov/vuln/detail/CVE-2022-29648
- https://github.com/jflyfox/jfinal_cms/issues/34
- https://github.com/jflyfox/jfinal_cms
CVE-2022-29648 · published · modified · JSON