CVE-2024-57770

概要

参考情報

• gitee.com/r1bbit/JFinalOA/issues/IBHUP1 · Exploit

jfinaloa のその他の脆弱性

• CVE-2024-57776中 4.6A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execu…
• CVE-2024-57775高 8.8JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.
• CVE-2024-57774中 4.8A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers …
• CVE-2024-57773中 4.8A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to …
• CVE-2024-57772中 4.8A cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of JFinalOA before v2025.01.01 allows attackers to …