High severity8.8NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2020-19155

Description

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' function in the component 'modules/filemanager/FileManagerController.java'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jflyfox/Jfinal CMS
cpe:2.3:a:jflyfox:jfinal_cms:*:*:*:*:*:*:*:*
Range: <=4.7.1
Jfinal CMS/Jfinal CMSdescription
Jfinal/CMSllm-fuzzy
Range: <=4.7.1

Patches

Vulnerability mechanics

References

www.seebug.org/vuldb/ssvid-97886nvdExploitThird Party Advisory
cwe.mitre.org/data/definitions/73.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000