CVE-2024-12351 | JFinalCMS 1.0 File Content ContentModel.java findPage name sql injection

A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file srcmainjavacomcmsentityContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql injection.

This vulnerability is uniquely identified as CVE-2024-12351. It is possible to initiate the attack remotely. There is no exploit available.