Headline
GHSA-cgmm-c2m9-ff7r: jFinal Server-Side Template Injection vulnerability
Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.
jFinal Server-Side Template Injection vulnerability
Moderate severity GitHub Reviewed Published Jun 26, 2023 to the GitHub Advisory Database • Updated Jun 29, 2023
Related news
CVE-2021-31635: Server Side Template Injection leading to Remote Code Execution · Issue #187 · jfinal/jfinal
Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.