← Database
CVE-2024-57768
CRITICAL
CVSS: 9.8
Published: 2025-01-16
Modified: 2026-06-17
Description
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key.
Affected Platforms
Jfinaloa Project Jfinaloa