A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/mda_main.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257710 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Dedecms |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-27767 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/mda_main.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257710 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 10 Apr 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:* | |
| Metrics |
ssvc
|
Wed, 15 Jan 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dedecms
Dedecms dedecms |
|
| CPEs | cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:* | |
| Vendors & Products |
Dedecms
Dedecms dedecms |
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2025-04-10T20:10:35.986Z
Reserved: 2024-03-22T10:37:30.815Z
Link: CVE-2024-2823
Vulnrichment
Updated: 2024-08-01T19:25:41.839Z
NVD
Status : Analyzed
Published: 2024-03-22T17:15:09.360
Modified: 2025-01-15T18:53:00.390
Link: CVE-2024-2823
Redhat
No data.
OpenCVE Enrichment
No data.