Lucene search

GHSA-W492-7G9M-J2WW Cross-Site Request Forgery in JFinalCMS

🗓️ 05 Dec 2023 15:37:30Reported by GoogleType

osv🔗 osv.dev👁 10 Views

JFinalCMS v5.0.0 CSRF vulnerability in /admin/tag/delete

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2023-49376	5 Dec 202315:15	–	nvd
OSV	CVE-2023-49376	5 Dec 202315:15	–	osv
Prion	Cross site request forgery (csrf)	5 Dec 202315:15	–	prion
CVE	CVE-2023-49376	5 Dec 202315:15	–	cve
Github Security Blog	Cross-Site Request Forgery in JFinalCMS	5 Dec 202315:30	–	github
Cvelist	CVE-2023-49376	5 Dec 202300:00	–	cvelist

Osv

Node

jfinal jfinalRange0–5.0.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-49376
github	www.github.com/cui2shark/cms/blob/main/Delete%20existing%20CSRF%20in%20label%20management.md
github	www.github.com/jfinal/jfinal

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Dec 2023 15:30Current

8.9High risk

Vulners AI Score8.9

CVSS38.8

EPSS0.00268