| Package | Affected versions | Patched versions |
|---|---|---|
| com.jfinal:jfinal | ≤ 5.0.0 | |
| jfinalcms | = 5.0.0 |
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free