CVE-2023-2424

CVE-2023-2424 affects DedeCMS 5.7.106. The vulnerability stems from the UpDateMemberModCache function in uploads/dede/config.php, which allows unrestricted file uploads due to the underlying issue described in multiple sources. The flaw can be exploited remotely, and public disclosures exist. Con...