230 matches found
CVE-2024-22818
CVE-2024-22818 affects FlyCms v1.0 and describes a Cross-Site Request Forgery (CSRF) at the endpoint /system/site/filterKeyword_save . According to the sources, this vulnerability enables unauthorized actions on the affected system when a user is authenticated, with a CVSS harness indicating NETW...
CVE-2024-22699
CVE-2024-22699 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /system/admin/update_group_save endpoint. The CVE’s impact is rated high (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), with attacker interaction required and no privileges required. The ...
CVE-2024-22593
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via the endpoint /system/admin/add_group_save. The issue allows forging requests to perform sensitive operations by an authenticated user, with CVSS v3.1 base metrics indicating high impact (C, I, A = High) and user interactio...
CVE-2024-22603
FlyCms v1.0 has a Cross-Site Request Forgery (CSRF) vulnerability exposed at the /system/links/add_link endpoint. The cited CVSS metrics indicate high impact (C/H/I/A) with network attack vector, low attack complexity, no privileges required, but user interaction required. Root cause details are ...
PT-2024-19488 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/score/del" API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround, consider restricti...
CVE-2024-22818
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...
CVE-2024-22817
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailconfupdagte...
CVE-2024-22548
Summary: CVE-2024-22548 affects FlyCms 1.0, with a Cross Site Scripting (XSS) vulnerability in the system website settings, specifically the website name field. What’s in scope (from provided docs): The vulnerability is described as XSS in FlyCms 1.0. CVSS v3.1 metrics indicate a base score of 5....
PT-2024-19501 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/links/add link" API endpoint. This allows for potentially malicious requests to be made without the user's knowledge or...
CVE-2024-22601
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/scorerulesave...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/site/filterKeywordsave location cross-site request...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/user/groupupdate location cross-site request forger...
CVE-2024-22819
CVE-2024-22819 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /system/email/email_templets_update endpoint. The issue arises from an unsafe CSRF protection surface on that API, allowing unintended requests to be performed in the context of an auth...
CVE-2024-22591
Summary: CVE-2024-22591 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /system/user/group_save endpoint. The NVD/Red Hat/CNNVD entries all reinforce the same flaw, with a CVSS v3.1 base score of 8.8 (High impact) and an attack vector of Network wi...
CVE-2024-22568
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via /system/score/del. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (HIGH), indicating high impact on confidentiality, integrity, and availability. Exploitation status is no...
CVE-2024-22819: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailtempletsupdate...
PT-2024-19576 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/site/filterKeyword save" API endpoint. This allows for potential unauthorized actions on the system. Recommendations: For...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/email/emailtempletsupdate location cross-site reque...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from the existence of cross-site scripting vulnerabilities...