medium6.5
CVE-2021-40645
An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.
Impact
An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfinaloa Project | Jfinaloa | Version 2021-09-07 |