DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php
References
Link | Resource |
---|---|
https://github.com/777erp/cms/blob/main/5.md | Exploit Third Party Advisory |
https://github.com/777erp/cms/blob/main/5.md | Exploit Third Party Advisory |
Configurations
History
01 Apr 2025, 13:42
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/777erp/cms/blob/main/5.md - Exploit, Third Party Advisory | |
CPE | cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:* | |
First Time |
Dedecms
Dedecms dedecms |
13 Mar 2025, 17:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-918 |
21 Nov 2024, 09:06
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/777erp/cms/blob/main/5.md - |
02 Aug 2024, 19:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
13 Mar 2024, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-13 13:15
Updated : 2025-04-01 13:42
NVD link : CVE-2024-28668
Mitre link : CVE-2024-28668
CVE.ORG link : CVE-2024-28668
JSON object : View
Products Affected
dedecms
- dedecms
CWE
CWE-918
Server-Side Request Forgery (SSRF)