CVE-2024-28675

creationtimestamp| type| source ---|---|--- 2024-03-13 15:26:41+00:00| seen| https://t.me/ctinow/206789 2024-03-13 15:26:53+00:00| seen| https://t.me/ctinow/206796...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28675

DedeCMS v5.7 , a PHP-based content management system by Desdev, contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /dede/diy_edit.php API endpoint, which allows an attacker to perform unauthorized actions via a forged request. Exploitation details are not provided ...