CVSS 3.1 Score 9.8 of 10 (high)


Published Feb 2, 2024
Updated: Feb 6, 2024


CVE-2024-24029 is a critical SQL injection vulnerability affecting JFinalCMS version 5.0.0. The vulnerability can be exploited via the /admin/content/data endpoint. This vulnerability has a base severity score of 9.8 and poses a high risk to organizations as it allows attackers to execute arbitrary SQL commands, potentially leading to unauthorized access, data theft, or manipulation. The privilege level required for exploitation is none, and user interaction is not needed. The attack vector is through the network, and the impact on integrity and confidentiality is high. To mitigate this vulnerability, affected organizations should update JFinalCMS to a patched version or apply security fixes provided by the vendor promptly.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-24029 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options