5.3
Medium
CVE-2024-4790 A vulnerability classified as problematic has been found in DedeCMS 5.7.114
Description
A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263889 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DedeCMS | 5.7.114 | No fix stated |
References
- VDB-263889 | DedeCMS path traversal vuldb.com
- VDB-263889 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #329483 | https://www.dedecms.com/ dedecms V5.7.114 Directory traversal vuldb.com
- github.com github.com
Timeline
- Published
- Last modified