JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.
References:GSA_kwCzR0hTQS01ZjU2LWg2ZmctcmNyaM4AA3kg
Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:com.jfinal:jfinal | <= 5.0.0 | No known fixed version | |
Affected Version RangesAll affected versions1.4.0, 4.9.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.9.7, 4.9.8, 4.9.9, 4.9.10, 4.9.11, 4.9.12, 4.9.13, 4.9.14, 4.9.15, 4.9.16, 4.9.17, 4.9.18, 4.9.19, 4.9.20, 4.9.21, 4.9.22, 4.9.23, 5.0.0 |
|||