Lucene search
+L

1 matches found

CVE
CVE
added 2023/12/05 12:00 a.m.48 views

CVE-2023-49395

JFinalCMS v5.0.0 has a Cross-Site Request Forgery (CSRF) vulnerability in /admin/category/update. Root cause: CSRF in that endpoint. Impact: high (confidentiality, integrity, availability) per CVSS 3.1 (8.8). Exploitation details are not provided in the connected docs. Remediation: in the PT-2023...

8.8CVSS8.8AI score0.00391EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder