CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

CVE-2024-28669

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/freelist_edit.php endpoint. This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. As a temporary workaround, users are recommended to restrict access to this spec...