CVE-2024-2823

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/mdamain.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-2823

CVE-2024-2823 affects DedeCMS 5.7, impacting the /src/dede/mda_main.php path. The issue is a cross-site request forgery (CSRF) vulnerability that can be triggered remotely; the CVSS vectors indicate NETWORK access, LOW attack complexity, NONE privileges, UI interaction required, with I/LOW impact...

CVE-2024-2823 DedeCMS mda_main.php cross-site request forgery

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/mdamain.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-2822

CVE-2024-2822 affects DedeCMS 5.7, targeting the /src/dede/vote_edit.php component. The issue arises from manipulating the parameter aid , enabling remote cross-site request forgery (CSRF). Exploitation has been disclosed publicly; no patch/versioned fix is documented in the provided sources. A p...

CVE-2024-2820

A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functionality of the file /src/dede/baidunews.php. The manipulation of the argument filename leads to cross-site request forgery. The attack can be launched remotely. The exploit has...

CVE-2024-2821

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. Affected by this issue is some unknown functionality of the file /src/dede/friendlinkedit.php. The manipulation of the argument id leads to cross-site request forgery. The attack may be launched remotely. The...

CVE-2024-2821

CVE-2024-2821 affects DedecMS 5.7 , where the vulnerability lies in the file /src/dede/friendlink_edit.php. Manipulating the id parameter leads to cross-site request forgery (CSRF); the attack can be launched remotely and the exploit has been publicly disclosed. Several sources confirm the condit...

CVE-2024-2820

DedeCMS 5.7 is affected by CVE-2024-2820 via the /src/dede/baidunews.php file. The vulnerability arises from manipulating the filename parameter, enabling cross-site request forgery (CSRF). The issue is exploitable remotely and the public exploit has been disclosed. Multiple sources (NVD/Red Hat/...

CVE-2024-2820 DedeCMS baidunews.php cross-site request forgery

A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functionality of the file /src/dede/baidunews.php. The manipulation of the argument filename leads to cross-site request forgery. The attack can be launched remotely. The exploit has...

PT-2024-22336 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic issue has been found in DedeCMS, affecting some unknown functionality of the file /src/dede/friendlink edit.php. The manipulation of the id argument leads to cross-site request forgery. The attac...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...

PT-2024-22506 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article add.php component. This allows an attacker to perform unintended actions on the website. Recommendations: For DedeCMS version 5.7, as a...

PT-2024-22517 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is related to the /dede/article edit.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting...

PT-2024-22429 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the "/dede/archives do.php" component. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For DedeCMS version 5.7,...

PT-2024-22433 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article edit.php component. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS version 5.7, as a...

PT-2024-22509 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/mychannel add.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the...

PT-2024-22522 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability can be exploited via the "/dede/diy add.php" API endpoint. Recommendations: For DedeCMS version 5.7, update to a version that...

PT-2024-2215

Name of the Vulnerable Software and Affected Versions Spring Security versions 5.7.x prior to 5.7.12 Spring Security versions 5.8.x prior to 5.8.11 Spring Security versions 6.0.x prior to 6.0.9 Spring Security versions 6.1.x prior to 6.1.8 Spring Security versions 6.2.x prior to 6.2.3 Bitbucket...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.7 SR1, which stems from the possibility of bypassing publisher application...