Vulnerabilities > Jfinal > High

DATE CVE VULNERABILITY TITLE RISK
2019-10-08 CVE-2019-17352 Unrestricted Upload of File with Dangerous Type vulnerability in Jfinal
In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file.
network
low complexity
jfinal CWE-434
7.5