← All advisories

Critical severity9.8NVD Advisory· Published Jun 26, 2023· Updated Jun 17, 2026

CVE-2021-31635

CVE-2021-31635

Description

Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.jfinal:jfinalMaven	<= 4.9.08	—

Affected products

3

Jfinal/Jfinalcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:jfinal:jfinal:4.9.08:*:*:*:*:*:*:*
ghsa-coords
pkg:maven/com.jfinal/jfinal
Range: <= 4.9.08

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-cgmm-c2m9-ff7rghsaADVISORY
github.com/jfinal/jfinal/issues/187nvdIssue TrackingThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-31635ghsaADVISORY
gitee.com/jfinal/jfinal/issues/I3IXLEghsaWEB

News mentions

0

No linked articles in our index yet.