提交 #590704: web jfinal_cms V5.0.1 Cross-Site Request Forgery

During the security review of "jfinal_cms",I discovered a critical CSRF injection vulnerability in the "HOME.java" file.
The logout method and others in the logout method do not impose restrictions on CSRF attacks, resulting in CSRF attacks

• 来源: ⚠️ https://github.com/webzzaa/CVE-/issues/3
• 用户: Tom132432 (UID 85670)
• 提交: 2025-06-05 12時36分 (1 年前)
• 管理: 2025-06-15 11時43分 (10 days later)
• 状态: 已接受
• VulDB条目: 312574 [jflyfox jfinal_cms 5.0.1 HOME.java logout 跨网站请求伪造]
• 积分: 17