CVE-2024-12349

Summary

CVE-2024-12349 is a newly disclosed vulnerability affecting JFinalCMS version 1.0. This issue poses a risk to an unidentified functionality in the /admin/tag/save file. The vulnerability enables an attacker to execute cross-site request forgery (CSRF) attacks, which can be launched remotely. The exploit for this vulnerability has been made public, increasing the potential threat to affected systems. Organizations using JFinalCMS 1.0 are advised to apply patches or upgrades as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.