CVE-2023-49397

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-12-05

Last modified

2024-08-02

Weaknesses

CWE-352

Affected products

• Jfinalcms (Jfinalcms Project)

References

• https://github.com/nightcloudos/new_cms/blob/main/CSRF%20exists%20at%20the%20change%20of%20column%20management%20status…