CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

Github Security Blog•added 2023/12/05 3:30 p.m.•19 views

Cross-Site Request Forgery in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS7.5AI score0.00268EPSS

Exploits1References3Affected Software1

OSV•added 2023/12/05 3:30 p.m.•0 views

GHSA-9WVJ-WR2F-6MX6 Cross-Site Request Forgery in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS5.9AI score0.00268EPSS

Exploits1References3

ATTACKERKB•added 2023/12/05 3:15 p.m.•0 views

CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS5.8AI score0.00268EPSS

Exploits1References2

NVD•added 2023/12/05 3:15 p.m.•11 views

CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS0.00268EPSS

Exploits1References1

Positive Technologies•added 2023/12/05 12:0 a.m.•2 views

PT-2023-31186 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the /admin/slide/save API endpoint. Recommendations: For JFinalCMS version 5.0.0, update to a...

8.8CVSS8.7AI score0.00268EPSS

Exploits1References9