CVE-2023-27234

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

CVE-2023-27234

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

CVE-2023-27234

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

CVE-2023-27234

CVE-2023-27234 is a CSRF vulnerability in Jizhicms v2.4.5 affecting the /Sys/index.html endpoint, enabling an attacker to arbitrarily change configuration with user interaction. Root cause: CSRF due to insufficient request validation. Impact: potential configuration modifications; CVSSv3.1 base s...