CVE-2022-37199

CVE-2022-37199 is a critical SQL Injection vulnerability affecting JFinal CMS 5.1.0, specifically through the /jfinal_cms/system/user/list endpoint. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network without authentication, allowing an attacker to achieve full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.