CVE-2024-12350

Summary

CVE-2024-12350 is a critical vulnerability affecting JFinalCMS version 1.0. The TemplateController.java file in the component Template Handler contains a command injection flaw in the update function. By manipulating the content argument, an attacker can inject malicious commands, potentially leading to remote code execution. The exploit for this vulnerability has been disclosed to the public, increasing the risk for potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.