← All advisories

Critical severity9.8NVD Advisory· Published May 5, 2022· Updated Jun 17, 2026

CVE-2021-42242

CVE-2021-42242

Description

A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jflyfox/Jfinal CMS2 versions
cpe:2.3:a:jflyfox:jfinal_cms:5.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jflyfox:jfinal_cms:5.0.1:*:*:*:*:*:*:*
- (no CPE)range: =5.0.1
jfinal_cms/jfinal_cmsdescription

Patches

Vulnerability mechanics

References

1

github.com/jflyfox/jfinal_cms/issues/28nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.