A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtml_spec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258919. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Dedecms |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-31742 | A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtml_spec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258919. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sat, 12 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Wed, 15 Jan 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dedecms
Dedecms dedecms |
|
| CPEs | cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:* | |
| Vendors & Products |
Dedecms
Dedecms dedecms |
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-01T20:05:07.744Z
Reserved: 2024-04-01T17:55:20.406Z
Link: CVE-2024-3144
Vulnrichment
Updated: 2024-08-01T20:05:07.744Z
NVD
Status : Analyzed
Published: 2024-04-02T02:15:07.667
Modified: 2025-01-15T18:47:12.967
Link: CVE-2024-3144
Redhat
No data.
OpenCVE Enrichment
No data.