A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/member_type.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263307. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/Hckwzh/cms/blob/main/16.md | Exploit |
| https://vuldb.com/?ctiid.263307 | Permissions Required VDB Entry |
| https://vuldb.com/?id.263307 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.324953 | Third Party Advisory VDB Entry |
| https://github.com/Hckwzh/cms/blob/main/16.md | Exploit |
| https://vuldb.com/?ctiid.263307 | Permissions Required VDB Entry |
| https://vuldb.com/?id.263307 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.324953 | Third Party Advisory VDB Entry |
Configurations
History
15 Jan 2025, 18:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:* | |
| References | () https://github.com/Hckwzh/cms/blob/main/16.md - Exploit | |
| References | () https://vuldb.com/?ctiid.263307 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.263307 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.324953 - Third Party Advisory, VDB Entry | |
| First Time |
Dedecms
Dedecms dedecms |
Information
Published : 2024-05-07 12:15
Updated : 2025-01-15 18:49
NVD link : CVE-2024-4585
Mitre link : CVE-2024-4585
CVE.ORG link : CVE-2024-4585
JSON object : View
Products Affected
dedecms
- dedecms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)