CVE-2021-40645: Jfinaloa Project Jfinaloa

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.

Affected products

• Jfinaloa Project Jfinaloa: version 2021-09-07 only

Published 2022-03-30. Last modified 2026-06-17.