CVE-2024-57770: Jfinaloa Project Jfinaloa

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id.

Affected products

• Jfinaloa Project Jfinaloa: before 2025-01-01 (fixed in 2025-01-01)

Published 2025-01-16. Last modified 2026-06-17.