Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-34245

May 14, 2024, 4:12 p.m.

Product(s) Impacted

DedeCMS

  • 5.7.114

Description

An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php.

Weaknesses

Date

Published: May 14, 2024, 3:38 p.m.

Last Modified: May 14, 2024, 4:12 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

cve@mitre.org

References

https://github.com/ cve@mitre.org