CVE-2020-19151

Published: 2021-09-15T14:15Z

Last Modified: 2024-11-21T05:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template file via the component 'jfinal_cms/admin/filemanager/list'. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt