Paper/Archive/CVE-2024-35375

CVE-2024-35375

dedecms dedecms — There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 40.6.406 × 208.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS

Affected

ProductAffectedFixed inSource

n/an/a–CNA

dedecms5.7.114–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refshtaoism.com refgist.github.com/Tsq741/a16015209fa8728d505c4f82b4f518cd