Arbitrary File Upload Vulnerability in DedeBIZ v6.3.0
CVE-2024-52770

Currently unrated

Key Information:

Vendor

DedeBIZ

Status
DedeBIZ
Vendor
CVE Published:
20 November 2024

What is CVE-2024-52770?

An arbitrary file upload vulnerability exists in the /admin/file_manage_control component of DedeBIZ v6.3.0, enabling attackers to upload malicious files and execute arbitrary code. This weakness can be exploited by crafting a specially designed file that circumvents file validation checks, potentially compromising the security and integrity of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/DedeBIZ/DedeV6/
https://co-a1natas.feishu.cn/docx/Zsd9dnGUvoBW6tx0G5fcVx6...

Timeline

  • Vulnerability published

JSON
.