Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v8vc-6766-vww4

Опубликовано: 09 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 4.3

Описание

A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 26%
0.00093
Низкий

6.9 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
около 1 года назад

A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 8.8
fstec
около 1 года назад

Уязвимость файла /admin/tag/save системы управления контентом Jfinal CMS, позволяющая нарушителю осуществить CSRF-атаку

EPSS

Процентиль: 26%
0.00093
Низкий

6.9 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-352