DedeCMS v5.7 vulnerable to CSRF via /dede/article_add.php
CVE-2024-28665

8.8HIGH

Key Information:

Vendor: DedeCMS
Status: Dedecms
Vendor: CVE Published:; 13 March 2024

What is CVE-2024-28665?

A vulnerability in DedeCMS version 5.7 allows attackers to exploit Cross-Site Request Forgery (CSRF) via the endpoint /dede/article_add.php. This flaw could enable malicious users to make unauthorized requests on behalf of legitimate users, potentially leading to unauthorized content manipulation or data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/777erp/cms/blob/main/1.md

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 13, 2024
Vulnerability Reserved
Mar 8, 2024

JSON

DedeCMS

What is CVE-2024-28665?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.