CVE-2022-37208

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-37208

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37208.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-37208

Published

2022-10-13T00:00:00Z

Modified

2026-07-15T01:48:55.816864428Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37208.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/jflyfox/jfinal_cms

Affected ranges

Type

GIT

Repo

https://github.com/jflyfox/jfinal_cms

Events

Introduced

f128a0d28bdaa80e6d38ff08c1b4fdc402eeed1e

Last affected

f128a0d28bdaa80e6d38ff08c1b4fdc402eeed1e

Database specific

{
    "cpe": "cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*

5.1.0

v5.*

v5.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37208.json"