CVE-2024-4588
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published May 7, 2024
Updated: Jun 4, 2024
CWE ID 352
Summary
CVE-2024-4588 is a newly disclosed vulnerability affecting DedeCMS 5.7. This issue is classified as problematic and involves an unknown function in the file /src/dede/mytag_add.php. The vulnerability allows for cross-site request forgery, enabling an attacker to launch remote attacks. The exploit has been made public, increasing the risk of widespread exploitation. Vendor response has been lacking, with no communication regarding a patch or mitigation. (VDB-263310)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share