Lucene search
+L

4 matches found

NVD
NVD
•added 2024/03/13 4:15 p.m.•25 views

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

8.8CVSS6.5AI score0.00876EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/13 12:00 a.m.•69 views

CVE-2024-28671

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located at the /dede/stepselect_main.php API endpoint. This flaw allows attackers to perform unauthorized actions via the web interface. As a temporary workaround, it is recommended to restrict access to this specific...

7.4AI score0.00876EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/13 12:00 a.m.•20 views

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

7.5AI score0.00876EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/13 12:00 a.m.•36 views

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

7.4AI score0.00876EPSS
SaveExploits1References1
Rows per page
Query Builder