CVE-2024-35375

CRITICAL
STIX 2.1 vulnerability

Record summary

CVE-2024-35375 has a selected CVSS score of 9.8 (critical).

Description

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 21, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

dedecms

Browse dedecms / dedecms

Default status: unknown

CVE List5.7.114affected

References

2