CVE-2023-49377

Summary

CVE-2023-49377 is a newly disclosed vulnerability affecting JFinalCMS version 5.0.0. This issue permits an attacker to execute Cross-Site Request Forgery (CSRF) attacks against administrators of the affected CMS platform. The vulnerability is specifically located in the /admin/tag/update endpoint, allowing an adversary to manipulate administrator actions by tricking them into clicking a malicious link. Successful exploitation could potentially result in unauthorized modifications to the content managed by the CMS. Administrators are strongly urged to upgrade to a patched version of JFinalCMS to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.