CVE-2023-27234: CSRF
Published Mar 15, 2023
·Updated
A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application.
Affected Software
1 affected component
Jizhicms JIZHICMS=2.4.5
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this CSRF vulnerability in Jizhicms v2.4.5?
The vulnerability ID for this CSRF vulnerability in Jizhicms v2.4.5 is CVE-2023-27234.
2
What is the severity of CVE-2023-27234?
The severity of CVE-2023-27234 is medium (6.5).
3
How does this CSRF vulnerability in Jizhicms v2.4.5 work?
This CSRF vulnerability in Jizhicms v2.4.5 allows attackers to make arbitrary configuration changes within the application by tricking authenticated users into performing unwanted actions.
4
Which software version is affected by this CSRF vulnerability?
The CSRF vulnerability in Jizhicms v2.4.5 affects version 2.4.5 of the software.
5
Is there a fix available for CVE-2023-27234?
At the moment, there is no known fix available for CVE-2023-27234. It is recommended to follow the guidance provided by the software vendor or developer.