CVE-2023-27234

2023-03-1500:00:00

mitre

www.cve.org

cross-site request forgery

jizhicms v2.4.5

configuration changes

cve-2023-27234

0.001 Low

EPSS

Percentile

21.8%

JSON

A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application.

References

github.com/Cherry-toto/jizhicms/issues/85

0.001 Low

EPSS

Percentile

21.8%

JSON

Related for CVELIST:CVE-2023-27234