Mengyang

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/friend link/update" API endpoint. **Recommendations** For JFinalCMS version 5.0.0, as a temporary workaround, consider restricting access to the "/admin/friend link/update" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was found in JFinalCMS. The vulnerability can be exploited via the `/admin/tag/delete` API endpoint. **Recommendations** For JFinalCMS version 5.0.0, as a temporary workaround, consider restricting access to the `/admin/tag/delete` API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was discovered in JFinalCMS. The vulnerability can be exploited via the `/admin/tag/update` API endpoint. **Recommendations** For JFinalCMS version 5.0.0, consider disabling access to the `/admin/tag/update` endpoint until a patch is available. Restricting the use of this endpoint can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/form/save" API endpoint. **Recommendations** For JFinalCMS version 5.0.0, as a temporary workaround, consider restricting access to the "/admin/form/save" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was found in the /admin/friend link/save component. This allows an attacker to perform unintended actions on the application. **Recommendations** For JFinalCMS version 5.0.0, as a temporary workaround, consider restricting access to the /admin/friend link/save component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/friend link/delete" API endpoint. **Recommendations** For JFinalCMS version 5.0.0, as a temporary workaround, consider restricting access to the "/admin/friend link/delete" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was found in JFinalCMS via the "/admin/div/update" API endpoint. This allows an attacker to perform unintended actions on the application. **Recommendations** For JFinalCMS version 5.0.0, as a temporary workaround, consider restricting access to the "/admin/div/update" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JFinalCMS version 5.0.0 **Description** A Cross-Site Request Forgery (CSRF) issue was found in JFinalCMS. The issue is related to the `/admin/tag/save` API endpoint. This allows for potential unauthorized actions on the system. **Recommendations** For JFinalCMS version 5.0.0, consider disabling access to the `/admin/tag/save` API endpoint until a patch is available to prevent potential CSRF attacks.