CVE-2024-35091

Description

References

• cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc · Third Party Advisory
• j2eefast.com · Product

More vulnerabilities in j2eefast

• CVE-2024-45944CRITICAL 9.8In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in a…
• CVE-2024-35090HIGH 8.2J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml.
• CVE-2024-35086CRITICAL 9.8J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .
• CVE-2024-35085MEDIUM 5.4J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.
• CVE-2024-35084CRITICAL 9.8J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.