3 matches found
CVE-2024-28429
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...
5.5CVSS6.5AI score0.00205EPSS
SaveExploits1References1
CVE-2024-28429
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...
5.6AI score0.00205EPSS
SaveExploits1References1
CVE-2024-28429
The PHP-based open-source content management system DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /dede/archives_do.php component, which allows an attacker to perform unintended actions on a user's behalf. While no specific mitigation measures are prov...
5.5CVSS7.4AI score0.00205EPSS
SaveExploits1References1Affected Software1
20