CVE-2023-49446

Maven/com.jfinal:jfinal CVE-2023-49446: high 8.8

Cross-Site Request Forgery in JFinalCMS via /admin/nav/save

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-hv4c-v8j8-54cw
• https://nvd.nist.gov/vuln/detail/CVE-2023-49446
• https://github.com/ysuzhangbin/cms/blob/main/There%20is%20a%20CSRF%20in%20the%20newly%20added%20navigation%20management%20area.md

CVE-2023-49446 · published 2023-12-05T15:30:38Z · modified 2024-02-16T08:02:53.367582Z · JSON