CVE-2024-35375

EUVD-2024-35723
There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
dedecmsdedecms
5.7.114
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://shtaoism.com/
https://gist.github.com/Tsq741/a16015209fa8728d505c4f82b4f518cd
http://shtaoism.com/
https://gist.github.com/Tsq741/a16015209fa8728d505c4f82b4f518cd