Miggo Logo
Miggo Vulnerability Database
→
CVE-2023-49446

CVE-2023-49446: Cross-Site Request Forgery in JFinalCMS via /admin/nav/save

8.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2023-49446
GHSA ID
GHSA-hv4c-v8j8-54cw
EPSS Score
0.50082%
CWE
CWE-352
Published
12/5/2023
Updated
12/12/2023
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
com.jfinal:jfinalmaven<= 5.0.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

J*in*l*MS v*.*.* w*s *is*ov*r** to *ont*in * *ross-Sit* R*qu*st *or**ry (*SR*) vuln*r**ility vi* /**min/n*v/s*v*.

Reasoning

No *n*lysis *v*il**l*