531 matches found
PT-2023-31230 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/nav/save" API endpoint. Recommendations: For JFinalCMS version 5.0.0, as a temporary...
JFinalCMS Security Vulnerability
JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/nav/save component...
CVE-2023-49398
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...
CVE-2023-49382
Summary of findings for CVE-2023-49382 Affected software: JFinalCMS, version 5.0.0. Vulnerability: Cross-Site Request Forgery (CSRF) exposed via the /admin/div/delete API endpoint. Impact: CVSSv3.1 base score 8.8 (High). Impacts to confidentiality, integrity, and availability are all rated High i...
CVE-2023-49447
Affected software and issue: JFinalCMS v5.0.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/nav/update component, due to insufficient validation of whether a request originates from a trusted user. Impact (as described): The vulnerability can enable an attacker to forge...
CVE-2023-49376
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/delete...
CVE-2023-49379
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /admin/friendlink/save...
CVE-2023-49447
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...
CVE-2023-49373
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...
CVE-2023-49380
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/delete...
CVE-2023-49383
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...
CVE-2023-49374
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...
CVE-2023-49382
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/div/delete...
CVE-2023-49395
JFinalCMS v5.0.0 has a Cross-Site Request Forgery (CSRF) vulnerability in /admin/category/update. Root cause: CSRF in that endpoint. Impact: high (confidentiality, integrity, availability) per CVSS 3.1 (8.8). Exploitation details are not provided in the connected docs. Remediation: in the PT-2023...
CVE-2023-49395
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/update...
CVE-2023-49448
JFinalCMS v5.0.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the admin/nav/delete endpoint. The CVE-2023-49448 entry identifies a CSRF issue with high impact to confidentiality, integrity, and availability (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No exploitation d...
CVE-2023-49378
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/form/save...
CVE-2023-49372
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...
CVE-2023-49376
CVE-2023-49376 corresponds to a CSRF vulnerability affecting JFinalCMS v5.0.0, exploitable via the /admin/tag/delete endpoint. The NVD entry notes a high-severity vector (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8). Connected advisories also confirm the issue originates from CS...