CVE-2024-12351

Summary

CVE-2024-12351 is a newly identified critical vulnerability that affects JFinalCMS version 1.0. The issue lies within the ContentModel.java file, specifically the findPage function in the File Content Handler component. An attacker can exploit this vulnerability by manipulating the name argument, leading to SQL injection. This vulnerability enables remote attacks, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.