CVE-2023-49373

Summary

CVE-2023-49373 is a newly disclosed vulnerability affecting the JFinalCMS version 5.0.0. This issue permits an attacker to execute a Cross-Site Request Forgery (CSRF) attack through the /admin/slide/delete endpoint. A successful exploitation could result in unintended actions being performed within the context of the targeted user. Users are strongly advised to update their JFinalCMS installation to the latest version to mitigate this risk. This vulnerability highlights the importance of maintaining software up-to-date to protect against known security threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.