Описание
Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.
Пакеты
Наименование
com.jfinal:jfinal
maven
Затронутые версииВерсия исправления
<= 5.0.0
Отсутствует
Связанные уязвимости
CVSS3: 8.8
nvd
около 2 лет назад
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.