← Back

J2eefast

j2eefast

21 CVEs • 1 product

Products (1)

Click to collapse
Toggle
J2eefast
j2eefast
21 CVEs

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-28890
1J2eefast
1J2eefast
Jun 17, 2026
Aug 12, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to fast/sys/user/list, (2) deptId parameter to fast/sys/role/list, or (3) roleId parameter to fast/sys/role/authUser/list, rela...Show more
J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to fast/sys/user/list, (2) deptId parameter to fast/sys/role/list, or (3) roleId parameter to fast/sys/role/authUser/list, related to the use of ${} to join SQL statements.Show less