High · 8.8 CVE-2023-49397 EUVD-2023-3114GHSA-5f56-h6fg-rcrh

Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus

Published Dec 5, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.jfinal:jfinal	<= 5.0.0	—	GHSA-5f56-h6fg-rcrh