CVE-2024-4586

Summary

CVE-2024-4586 is a newly disclosed vulnerability affecting DedeCMS 5.7. The issue lies within the unknown code of the file /src/dede/shops_delivery.php, which can be exploited remotely to carry out cross-site request forgery attacks. This vulnerability, identified as VDB-263308, allows attackers to manipulate commands on affected systems. Despite early notification, the vendor has not responded to disclose a patch or mitigation strategy, leaving systems potentially exposed to exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.