CVE-2021-31649

2021-06-2416:15:08

Google

osv.dev

7.6 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

JSON

In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute

CPENameOperatorVersion
jfinaleqjfinal-1.5
jfinaleqjfinal-3.7
jfinaleqjfinal-3.5
jfinaleqjfinal-4.9.02
jfinaleqjfinal-4.9.06
jfinaleqjfinal-3.1
jfinaleqjfinal-1.8
jfinaleqjfinal-1.2
jfinaleqjfinal-4.7
jfinaleqjfinal-3.2

Name	Operator	Version
jfinal	eq	jfinal-1.5
jfinal	eq	jfinal-3.7
jfinal	eq	jfinal-3.5
jfinal	eq	jfinal-4.9.02
jfinal	eq	jfinal-4.9.06
jfinal	eq	jfinal-3.1
jfinal	eq	jfinal-1.8
jfinal	eq	jfinal-1.2
jfinal	eq	jfinal-4.7
jfinal	eq	jfinal-3.2