CVE-2023-5312 in DedeCMS

Prediction

by VulDB Data Team • 10/22/2023

A vulnerability has been found in DedeCMS 5.7.111. This vulnerability affects unknown code of the file baidunews.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Reservation: 09/29/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-240948
• CPE: ready
• CWE: CWE-434 (confirmed)
• Exploit: Download
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Lawfirm, Agriculture, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-5312
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-5312
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-5312/