Lucene search

GHSA-GFHV-XXQJ-H323 Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/update

🗓️ 05 Dec 2023 15:37:30Reported by GoogleType

osv🔗 osv.dev👁 13 Views

JFinalCMS v5.0.0 CSRF via /admin/friend_link/update

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Prion	Cross site request forgery (csrf)	5 Dec 202315:15	–	prion
Cvelist	CVE-2023-49375	5 Dec 202300:00	–	cvelist
CVE	CVE-2023-49375	5 Dec 202315:15	–	cve
NVD	CVE-2023-49375	5 Dec 202315:15	–	nvd
OSV	CVE-2023-49375	5 Dec 202315:15	–	osv
Github Security Blog	Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/update	5 Dec 202315:30	–	github

Osv

Node

jfinal jfinalRange0–5.0.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-49375
github	www.github.com/cui2shark/cms/blob/main/There%20is%20CSRF%20in%20the%20modification%20of%20the%20friendship%20link.md

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Dec 2023 15:30Current

8.9High risk

Vulners AI Score8.9

CVSS38.8

EPSS0.00268