CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2024/03/13 2:15 p.m.•20 views

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

8.8CVSS6.5AI score0.00316EPSS

SaveExploits1References1

Prion•added 2024/03/13 2:15 p.m.•46 views

Cross site request forgery (csrf)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

7.5AI score0.00316EPSS

SaveExploits1References1

CVE•added 2024/03/13 12:00 a.m.•60 views

CVE-2024-28675

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) attack via the /dede/diy_edit.php API endpoint. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. To remediate this issue, users are recommended to update to a newer version o...

7.4AI score0.00316EPSS

SaveExploits1References1Affected Software1

Vulnrichment•added 2024/03/13 12:00 a.m.•20 views

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

7.7AI score0.00316EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2024/03/13 12:00 a.m.•3 views

CVE-2024-28675: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

8.8CVSS6.7AI score0.00316EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by