3 matches found
CVE-2024-28430
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...
6.1CVSS6.5AI score0.00219EPSS
SaveExploits1References1
CVE-2024-28430
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...
6.4AI score0.00219EPSS
SaveExploits1References1
CVE-2024-28430
DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/catalog_edit.php component. This flaw allows an attacker to trigger potentially malicious requests without the user's knowledge or consent. As a temporary workaround, users are advised to restrict access ...
6.1CVSS7.4AI score0.00219EPSS
SaveExploits1References1Affected Software1
20