CVE:CVE-2021-40645
CNNVD:CNNVD-202203-2621
JFinalOA是一个基于 JFinal 框架开发的企业办公系统。
JFinalOA 存在SQL注入漏洞，该漏洞源于 FlowTaskController 的 getHaveDoneTaskDataList 方法中于 defkey 参数存在SQL注入漏洞。
solution:Upgrade jfinaloa_project jfinaloa to a higher version than 2021-09-07,and avoid the version 2021-09-07