CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/01/09 12:37 p.m.•23 views

CVE-2023-49447

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

8.8CVSS7.7AI score0.00391EPSS

SaveExploits1References1

attackerkb•added 2023/12/05 3:15 p.m.•14 views

CVE-2023-49447

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

8.8CVSS7.3AI score0.00391EPSS

SaveExploits1References2

NVD•added 2023/12/05 3:15 p.m.•28 views

CVE-2023-49447

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

8.8CVSS0.00391EPSS

SaveExploits1References1

CVE•added 2023/12/05 12:00 a.m.•64 views

CVE-2023-49447

Affected software and issue: JFinalCMS v5.0.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/nav/update component, due to insufficient validation of whether a request originates from a trusted user. Impact (as described): The vulnerability can enable an attacker to forge...

8.8CVSS7.8AI score0.00391EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2023/12/05 12:00 a.m.•37 views

CVE-2023-49447

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

9.1AI score0.00391EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2023/12/05 12:00 a.m.•2 views

CVE-2023-49447: Cross-Site Request Forgery (CSRF)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

8.8CVSS7.8AI score0.00391EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by