Unrestricted Upload Vulnerability in DedeCMS 5.7.116 by DedeCMS
CVE-2024-11138
9.8CRITICAL
What is CVE-2024-11138?
An issue has been identified in DedeCMS version 5.7.116 that involves an unrestricted upload vulnerability present in the /dede/uploads/dede/friendlink_add.php file. The flaw arises from improper handling of the 'logoimg' parameter, permitting adversaries to upload arbitrary files. This vulnerability can be exploited remotely, posing a significant risk to the integrity and security of affected DedeCMS installations. Public disclosure of this vulnerability increases the urgency for users to apply necessary patches and safeguards.