4 matches found
CVE-2024-28671
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...
8.8CVSS6.5AI score0.00876EPSS
SaveExploits1References1
CVE-2024-28671
DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located at the /dede/stepselect_main.php API endpoint. This flaw allows attackers to perform unauthorized actions via the web interface. As a temporary workaround, it is recommended to restrict access to this specific...
7.4AI score0.00876EPSS
SaveExploits1References1Affected Software1
20