CVE-2024-4588

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published May 7, 2024
Updated: Jun 4, 2024
CWE ID 352

Summary

CVE-2024-4588 is a newly disclosed vulnerability affecting DedeCMS 5.7. This issue is classified as problematic and involves an unknown function in the file /src/dede/mytag_add.php. The vulnerability allows for cross-site request forgery, enabling an attacker to launch remote attacks. The exploit has been made public, increasing the risk of widespread exploitation. Vendor response has been lacking, with no communication regarding a patch or mitigation. (VDB-263310)

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share