CVE-2024-22568

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...

CVE-2024-22591

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupsave...

CVE-2024-22603

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/links/addlink...

CVE-2024-22549

FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the email settings of the website settings section...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms security vulnerabilities , the vulnerability stems from /system/links/addlink location cross-site request forgery...

CVE-2024-22568

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms has a security vulnerability , the vulnerability stems from /system/score/del location cross-site request forgery...

CVE-2024-22548

FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/user/groupsave location cross-site request forgery...

CVE-2024-22593

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...

CVE-2024-22591

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupsave...

PT-2024-19501 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/links/add link" API endpoint. This allows for potentially malicious requests to be made without the user's knowledge or...

PT-2024-19500 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/score/scorerule save" API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround, conside...

CVE-2024-22819

CVE-2024-22819 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /system/email/email_templets_update endpoint. The issue arises from an unsafe CSRF protection surface on that API, allowing unintended requests to be performed in the context of an auth...

CVE-2024-22818

CVE-2024-22818 affects FlyCms v1.0 and describes a Cross-Site Request Forgery (CSRF) at the endpoint /system/site/filterKeyword_save . According to the sources, this vulnerability enables unauthorized actions on the affected system when a user is authenticated, with a CVSS harness indicating NETW...

CVE-2024-22601

CVE-2024-22601 concerns FlyCms v1.0 and a CSRF vulnerability exploitable at the API endpoint /system/score/scorerule_save. The connected documents consistently describe a Cross-Site Request Forgery issue in FlyCms 1.0, with the underlying risk indicated as high (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U...

CVE-2024-22603

FlyCms v1.0 has a Cross-Site Request Forgery (CSRF) vulnerability exposed at the /system/links/add_link endpoint. The cited CVSS metrics indicate high impact (C/H/I/A) with network attack vector, low attack complexity, no privileges required, but user interaction required. Root cause details are ...

CVE-2024-22699

CVE-2024-22699 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /system/admin/update_group_save endpoint. The CVE’s impact is rated high (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), with attacker interaction required and no privileges required. The ...

CVE-2024-22592

FlyCms v1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /system/user/group_update endpoint. The CVSS metrics indicate a High impact across confidentiality, integrity, and availability with network access, low attack complexity, no privileges required, and user interact...

CVE-2024-22591

Summary: CVE-2024-22591 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /system/user/group_save endpoint. The NVD/Red Hat/CNNVD entries all reinforce the same flaw, with a CVSS v3.1 base score of 8.8 (High impact) and an attack vector of Network wi...