Dedecms · Dedecms · CVE-2023-2056
**Name of the Vulnerable Software and Affected Versions**
DedeCMS versions up to 5.7.87
**Description**
A critical issue affects the function GetSystemFile of the file module main.php, leading to code injection. The attack may be initiated remotely.
**Recommendations**
For versions up to 5.7.87, as a temporary workaround, consider disabling the GetSystemFile function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.