High · 8.8 CVE-2023-49379 EUVD-2023-3280GHSA-r2wj-mxvh-wqfh

Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save

Published Dec 5, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.jfinal:jfinal	<= 5.0.0	—	GHSA-r2wj-mxvh-wqfh