Cross-Site Request Forgery Vulnerability in JFinalCMS by cuishark
CVE-2023-49375

8.8HIGH

Key Information:

Vendor: Jfinalcms Project
Status: Jfinalcms
Vendor: CVE Published:; 5 December 2023

🔔 Create Jfinalcms Project Vulnerability Alert

What is CVE-2023-49375?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in JFinalCMS version 5.0.0. This weakness allows an attacker to trick users into executing unwanted actions on the administrative interface, potentially compromising the integrity of user data and the security of the application. Attackers can exploit this flaw via the /admin/friend_link/update endpoint, making it crucial for users to implement security measures to restrict unauthorized access and actions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/cui2shark/cms/blob/main/There%20is%20C...

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 5, 2023
Vulnerability Reserved
Nov 27, 2023

JSON

Jfinalcms Project

What is CVE-2023-49375?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.