DedeCMS config.php UpDateMemberModCache unrestricted upload

CVE-2023-2424

Summary

A vulnerability exists in DedeCMS version 5.7.106 that allows an attacker to exploit the UpDateMemberModCache function within the uploads/dede/config.php file. This flaw enables unauthorized file uploads, which can lead to serious security breaches, including remote code execution. The exploit is publicly known, potentially putting websites running this version at risk. It is crucial for users to apply security patches and review their configurations to mitigate this threat.

References