Lucene search
+L

9 matches found

osv-ghsa
osv-ghsa
•added 2023/12/05 3:30 p.m.•18 views

GHSA-R6MG-FQ87-GW34 Cross-Site Request Forgery in JFinalCMS via /admin/tag/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

8.8CVSS5.9AI score0.00391EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/05 3:15 p.m.•13 views

CVE-2023-49377

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/05 3:15 p.m.•31 views

CVE-2023-49377

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

8.8CVSS0.00391EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/05 3:15 p.m.•25 views

Cross site request forgery (csrf)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

6.8CVSS7.8AI score0.00391EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/12/05 12:00 a.m.•23 views

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/tag/update component...

8.8CVSS8.4AI score0.00391EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2023/12/05 12:00 a.m.•34 views

CVE-2023-49377

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

8.9AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•6 views

CVE-2023-49377: Cross-Site Request Forgery (CSRF)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

8.8CVSS7.8AI score0.00391EPSS
SaveExploits1References2
Mend
Mend
•added 2023/12/05 12:00 a.m.•5 views

CVE-2023-49377

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

8.8CVSS0.00391EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/12/05 12:00 a.m.•22 views

PT-2023-31191 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the /admin/tag/update API endpoint. Recommendations: For JFinalCMS version 5.0.0, consider...

8.8CVSS8.6AI score0.00391EPSS
SaveExploits1References8
Rows per page
Query Builder