CVE-2024-51157

Name of the Vulnerable Software and Affected Versions: 07FLYCMS version 1.3.9

Description: A Cross-Site Request Forgery (CSRF) issue was discovered in 07FLYCMS. The issue occurs via the component at "http://erp.07fly.net:80/oa/OaSchedule/add.html".

Recommendations: For version 1.3.9, as a temporary workaround, consider restricting access to the vulnerable component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.