DedeCMS 5.7 Vulnerability: Cross-Site Request Forgery (CSRF) Remotely Exploitable

CVE-2024-4586

4.3MEDIUM

Key Information

Vendor: DedeCMS
Status: Dedecms
Vendor: CVE Published:; 7 May 2024

Summary

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/shops_delivery.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263308. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Version(s)

DedeCMS = 5.7

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

VulDB entry last update
May 7, 2024
Vulnerability Reserved.
May 7, 2024
VulDB entry created
May 7, 2024
Advisory disclosed
May 7, 2024
Vulnerability published.
May 7, 2024

Collectors

NVD DatabaseMitre Database

Credit

urkc. (VulDB User)