Is CVE-2023-47503 actively exploited?

No active exploitation of CVE-2023-47503 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-47503 be exploited remotely?

Yes. CVE-2023-47503 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-47503?

CVE-2023-47503 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2023-47503

CRITICAL

CVE-2023-47503

NVD-CWE-noinfoPublished: November 28, 2023· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module.

NVD Source

Risk Analysis

jfinalCMS v.5.1.0 allows remote attackers to execute arbitrary code by sending a crafted script to the login.jsp component. This critical vulnerability has a CVSS score of 9.8, indicating a high risk of system compromise.

There is no public exploit known for this issue, and it is not in the CISA KEV. It is remotely exploitable with low attack complexity.

Recommended Action

Users should apply available patches for jfinalCMS or upgrade to a secure version to prevent unauthorized code execution.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2023-47503 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.