← All advisories

Critical severity9.8NVD Advisory· Published Dec 2, 2024· Updated Jun 17, 2026

CVE-2024-53477

CVE-2024-53477

Description

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Jflyfox/Jfinal CMS2 versions
cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*
- (no CPE)range: =5.1.0
Jfinal/Jfinalcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =5.1.0

Patches

Vulnerability mechanics

References

2

gist.github.com/kaoniniang2/c2deceea281fcd0aec5a8165183be3c1nvdIssue TrackingThird Party Advisory
github.com/jflyfox/jfinal_cms/releases/tag/v5.1.0nvdRelease Notes

News mentions

0

No linked articles in our index yet.