{"schema_version":1,"title":"com.jfinal:jfinal (Maven) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 36 vulnerabilities in com.jfinal:jfinal (Maven): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2024-22497, was published on 23 January 2024.","url":"https://junglewise.ai/threats/technologies/com-jfinal-jfinal","json_url":"https://junglewise.ai/threats/technologies/com-jfinal-jfinal.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/com-jfinal-jfinal","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":36,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2024-22497","cvss":3.1,"epss":0.0044,"slug":"cve-2024-22497-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-23T21:30:20+00:00","url":"https://junglewise.ai/threats/cve-2024-22497-cross-site-scripting-in-jfinal"},{"cve":"CVE-2024-22496","cvss":3.1,"epss":0.0044,"slug":"cve-2024-22496-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-23T18:31:11+00:00","url":"https://junglewise.ai/threats/cve-2024-22496-cross-site-scripting-in-jfinal"},{"cve":"CVE-2024-22493","cvss":3.1,"epss":0.0056,"slug":"cve-2024-22493-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-12T18:30:20+00:00","url":"https://junglewise.ai/threats/cve-2024-22493-cross-site-scripting-in-jfinal"},{"cve":"CVE-2024-22492","cvss":3.1,"epss":0.0056,"slug":"cve-2024-22492-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-12T18:30:20+00:00","url":"https://junglewise.ai/threats/cve-2024-22492-cross-site-scripting-in-jfinal"},{"cve":"CVE-2023-50137","cvss":3.1,"epss":0.0046,"slug":"cve-2023-50137-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalcms","severity":"low","exploited":false,"published_at":"2023-12-14T18:30:21+00:00","url":"https://junglewise.ai/threats/cve-2023-50137-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-50100","cvss":3.1,"epss":0.0044,"slug":"cve-2023-50100-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalcms","severity":"low","exploited":false,"published_at":"2023-12-14T18:30:21+00:00","url":"https://junglewise.ai/threats/cve-2023-50100-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-50102","cvss":3.1,"epss":0.0043,"slug":"cve-2023-50102-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalcms","severity":"low","exploited":false,"published_at":"2023-12-14T18:30:21+00:00","url":"https://junglewise.ai/threats/cve-2023-50102-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-50101","cvss":3.1,"epss":0.0044,"slug":"cve-2023-50101-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalcms","severity":"low","exploited":false,"published_at":"2023-12-14T18:30:21+00:00","url":"https://junglewise.ai/threats/cve-2023-50101-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-50449","cvss":3.1,"epss":0.0121,"slug":"cve-2023-50449-directory-traversal-in-jfinalcms","title":"Directory Traversal in JFinalCMS","severity":"low","exploited":false,"published_at":"2023-12-10T18:30:18+00:00","url":"https://junglewise.ai/threats/cve-2023-50449-directory-traversal-in-jfinalcms"},{"cve":"CVE-2023-49485","cvss":3.1,"epss":0.0041,"slug":"cve-2023-49485-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalCMS","severity":"low","exploited":false,"published_at":"2023-12-08T15:30:19+00:00","url":"https://junglewise.ai/threats/cve-2023-49485-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-49487","cvss":3.1,"epss":0.0041,"slug":"cve-2023-49487-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalCMS","severity":"low","exploited":false,"published_at":"2023-12-08T15:30:19+00:00","url":"https://junglewise.ai/threats/cve-2023-49487-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-49486","cvss":3.1,"epss":0.0042,"slug":"cve-2023-49486-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalCMS","severity":"low","exploited":false,"published_at":"2023-12-08T15:30:19+00:00","url":"https://junglewise.ai/threats/cve-2023-49486-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2023-49395","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49395-cross-site-request-forgery-in-jfinalcms-via-admin-category-update","title":"Cross-Site Request Forgery in JFinalCMS via /admin/category/update","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49395-cross-site-request-forgery-in-jfinalcms-via-admin-category-update"},{"cve":"CVE-2023-49381","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49381-cross-site-request-forgery-in-jfinalcms-via-admin-div-update","title":"Cross-Site Request Forgery in JFinalCMS via /admin/div/update","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49381-cross-site-request-forgery-in-jfinalcms-via-admin-div-update"},{"cve":"CVE-2023-49382","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49382-cross-site-request-forgery-in-jfinalcms-via-admin-div-delete","title":"Cross-Site Request Forgery in JFinalCMS via /admin/div/delete","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49382-cross-site-request-forgery-in-jfinalcms-via-admin-div-delete"},{"cve":"CVE-2023-49398","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49398-cross-site-request-forgery-in-jfinalcms-via-admin-category-delete","title":"Cross-Site Request Forgery in JFinalCMS via /admin/category/delete","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49398-cross-site-request-forgery-in-jfinalcms-via-admin-category-delete"},{"cve":"CVE-2023-49448","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49448-cross-site-request-forgery-in-jfinalcms-via-admin-nav-delete","title":"Cross-Site Request Forgery in JFinalCMS via admin/nav/delete","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49448-cross-site-request-forgery-in-jfinalcms-via-admin-nav-delete"},{"cve":"CVE-2023-49447","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49447-cross-site-request-forgery-in-jfinalcms-via-admin-nav-update","title":"Cross-Site Request Forgery in JFinalCMS via /admin/nav/update","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49447-cross-site-request-forgery-in-jfinalcms-via-admin-nav-update"},{"cve":"CVE-2023-49397","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49397-cross-site-request-forgery-in-jfinalcms-via-admin-category","title":"Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49397-cross-site-request-forgery-in-jfinalcms-via-admin-category"},{"cve":"CVE-2023-49446","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49446-cross-site-request-forgery-in-jfinalcms-via-admin-nav-save","title":"Cross-Site Request Forgery in JFinalCMS via /admin/nav/save","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49446-cross-site-request-forgery-in-jfinalcms-via-admin-nav-save"},{"cve":"CVE-2023-49396","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49396-cross-site-request-forgery-in-jfinalcms-via-admin-category-save","title":"Cross-Site Request Forgery in JFinalCMS via /admin/category/save","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49396-cross-site-request-forgery-in-jfinalcms-via-admin-category-save"},{"cve":"CVE-2023-49383","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49383-cross-site-request-forgery-in-jfinalcms-via-admin-tag-save","title":"Cross-Site Request Forgery in JFinalCMS via /admin/tag/save","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:38+00:00","url":"https://junglewise.ai/threats/cve-2023-49383-cross-site-request-forgery-in-jfinalcms-via-admin-tag-save"},{"cve":"CVE-2023-49376","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49376-cross-site-request-forgery-in-jfinalcms","title":"Cross-Site Request Forgery in JFinalCMS","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:37+00:00","url":"https://junglewise.ai/threats/cve-2023-49376-cross-site-request-forgery-in-jfinalcms"},{"cve":"CVE-2023-49380","cvss":3.1,"epss":0.0039,"slug":"cve-2023-49380-cross-site-request-forgery-in-jfinalcms-via-admin-friend-link","title":"Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/delete","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:37+00:00","url":"https://junglewise.ai/threats/cve-2023-49380-cross-site-request-forgery-in-jfinalcms-via-admin-friend-link"},{"cve":"CVE-2023-49379","cvss":3.1,"epss":0.004,"slug":"cve-2023-49379-cross-site-request-forgery-in-jfinalcms-via-the-component-admin","title":"Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save","severity":"low","exploited":false,"published_at":"2023-12-05T15:30:37+00:00","url":"https://junglewise.ai/threats/cve-2023-49379-cross-site-request-forgery-in-jfinalcms-via-the-component-admin"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"com.liferay.portal:release.portal.bom (Maven)","slug":"com-liferay-portal-release-portal-bom","vulnerabilities":92,"url":"https://junglewise.ai/threats/technologies/com-liferay-portal-release-portal-bom"},{"name":"org.keycloak:keycloak-services (Maven)","slug":"org-keycloak-keycloak-services","vulnerabilities":76,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-services"},{"name":"org.keycloak:keycloak-core (Maven)","slug":"org-keycloak-keycloak-core","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-core"},{"name":"org.apache.struts:struts2-core (Maven)","slug":"org-apache-struts-struts2-core","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/org-apache-struts-struts2-core"},{"name":"net.mingsoft:ms-mcms (Maven)","slug":"net-mingsoft-ms-mcms","vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/net-mingsoft-ms-mcms"},{"name":"com.thoughtworks.xstream:xstream (Maven)","slug":"com-thoughtworks-xstream-xstream","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/com-thoughtworks-xstream-xstream"},{"name":"org.jenkins-ci.plugins:script-security (Maven)","slug":"org-jenkins-ci-plugins-script-security","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/org-jenkins-ci-plugins-script-security"},{"name":"org.apache.tomcat:tomcat (Maven)","slug":"org-apache-tomcat-tomcat","vulnerabilities":35,"url":"https://junglewise.ai/threats/technologies/org-apache-tomcat-tomcat"},{"name":"com.liferay.portal:release.dxp.bom (Maven)","slug":"com-liferay-portal-release-dxp-bom","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/com-liferay-portal-release-dxp-bom"},{"name":"org.opencms:opencms-core (Maven)","slug":"org-opencms-opencms-core","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/org-opencms-opencms-core"},{"name":"org.keycloak:keycloak-parent (Maven)","slug":"org-keycloak-keycloak-parent","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-parent"},{"name":"com.fasterxml.jackson.core:jackson-databind (Maven)","slug":"com-fasterxml-jackson-core-jackson-databind","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/com-fasterxml-jackson-core-jackson-databind"}],"technology":{"hub":true,"name":"com.jfinal:jfinal (Maven)","slug":"com-jfinal-jfinal","vendor":{"name":"Maven","slug":"maven","url":"https://junglewise.ai/threats/vendors/maven"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/com-jfinal-jfinal"},"most_severe":[{"cve":"CVE-2019-17352","cvss":3.1,"epss":0.0174,"slug":"cve-2019-17352-jfinal-file-validation-vulnerability","title":"JFinal file validation vulnerability","severity":"low","exploited":false,"published_at":"2022-05-25T19:21:15+00:00","url":"https://junglewise.ai/threats/cve-2019-17352-jfinal-file-validation-vulnerability"},{"cve":"CVE-2023-50449","cvss":3.1,"epss":0.0121,"slug":"cve-2023-50449-directory-traversal-in-jfinalcms","title":"Directory Traversal in JFinalCMS","severity":"low","exploited":false,"published_at":"2023-12-10T18:30:18+00:00","url":"https://junglewise.ai/threats/cve-2023-50449-directory-traversal-in-jfinalcms"},{"cve":"CVE-2021-31635","cvss":3.1,"epss":0.0121,"slug":"cve-2021-31635-jfinal-server-side-template-injection-vulnerability","title":"jFinal Server-Side Template Injection vulnerability","severity":"low","exploited":false,"published_at":"2023-06-26T21:30:59+00:00","url":"https://junglewise.ai/threats/cve-2021-31635-jfinal-server-side-template-injection-vulnerability"},{"cve":"CVE-2021-33348","cvss":3.1,"epss":0.0064,"slug":"cve-2021-33348-cross-site-scripting-in-jfinal","title":"Cross-site scripting in jfinal","severity":"low","exploited":false,"published_at":"2021-08-13T15:22:14+00:00","url":"https://junglewise.ai/threats/cve-2021-33348-cross-site-scripting-in-jfinal"},{"cve":"CVE-2024-22492","cvss":3.1,"epss":0.0056,"slug":"cve-2024-22492-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-12T18:30:20+00:00","url":"https://junglewise.ai/threats/cve-2024-22492-cross-site-scripting-in-jfinal"},{"cve":"CVE-2024-22493","cvss":3.1,"epss":0.0056,"slug":"cve-2024-22493-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-12T18:30:20+00:00","url":"https://junglewise.ai/threats/cve-2024-22493-cross-site-scripting-in-jfinal"},{"cve":"CVE-2022-33113","cvss":3.1,"epss":0.0051,"slug":"cve-2022-33113-cross-site-scripting-in-jfinal-cms","title":"Cross-site Scripting in Jfinal CMS","severity":"low","exploited":false,"published_at":"2022-06-24T00:00:31+00:00","url":"https://junglewise.ai/threats/cve-2022-33113-cross-site-scripting-in-jfinal-cms"},{"cve":"CVE-2023-50137","cvss":3.1,"epss":0.0046,"slug":"cve-2023-50137-cross-site-scripting-in-jfinalcms","title":"Cross-site Scripting in JFinalcms","severity":"low","exploited":false,"published_at":"2023-12-14T18:30:21+00:00","url":"https://junglewise.ai/threats/cve-2023-50137-cross-site-scripting-in-jfinalcms"},{"cve":"CVE-2024-22497","cvss":3.1,"epss":0.0044,"slug":"cve-2024-22497-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-23T21:30:20+00:00","url":"https://junglewise.ai/threats/cve-2024-22497-cross-site-scripting-in-jfinal"},{"cve":"CVE-2024-22496","cvss":3.1,"epss":0.0044,"slug":"cve-2024-22496-cross-site-scripting-in-jfinal","title":"Cross-site Scripting in JFinal","severity":"low","exploited":false,"published_at":"2024-01-23T18:31:11+00:00","url":"https://junglewise.ai/threats/cve-2024-22496-cross-site-scripting-in-jfinal"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}