Cross-Site Request Forgery in JFinalCMS via /admin/nav/update

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-49447 · ADVISORY
• ysuzhangbin/cms · WEB

Lỗ hổng khác của com.jfinal:jfinal

• CVE-2024-22497TRUNG BÌNH 6.1Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via cr…
• CVE-2024-22496TRUNG BÌNH 6.1Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter.
• CVE-2024-22493TRUNG BÌNH 5.4A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbi…
• CVE-2024-22492TRUNG BÌNH 5.4A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbi…
• CVE-2023-50137TRUNG BÌNH 5.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.