Lucene search
+L

3 matches found

NVD
NVD
•added 2024/03/13 4:15 p.m.•25 views

CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...

5.4CVSS6.5AI score0.00229EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/13 12:00 a.m.•32 views

CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...

7.4AI score0.00229EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/13 12:00 a.m.•79 views

CVE-2024-28672

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/media_edit.php endpoint. An attacker could potentially perform unauthorized actions via this endpoint if a victim with sufficient privileges interacts with a malicious link. As a temporary workaro...

5.4CVSS7.4AI score0.00229EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder