DedeCMS 5.7 Vulnerability: Cross-Site Request Forgery (CSRF) Remotely Exploitable

CVE-2024-4588

4.3MEDIUM

Key Information

Vendor: DedeCMS
Status: Dedecms
Vendor: CVE Published:; 7 May 2024

Summary

A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/mytag_add.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263310 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Version(s)

DedeCMS = 5.7

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

VulDB entry last update
May 7, 2024
Vulnerability Reserved.
May 7, 2024
VulDB entry created
May 7, 2024
Advisory disclosed
May 7, 2024
Vulnerability published.
May 7, 2024

Collectors

NVD DatabaseMitre Database

Credit

urkc. (VulDB User)