PT-2024-15536 · Deshang · Deshang Dscms

Glzjin · Published 2024-01-11 · Updated 2024-05-17 · CVE-2024-0413

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DeShang DSKMS versions up to 3.1.2

Description A vulnerability was found in DeShang DSKMS, affecting some unknown processing of the file public/install.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For DeShang DSKMS versions up to 3.1.2, consider updating to a version later than 3.1.2 to resolve the issue. As a temporary workaround, consider restricting access to the public/install.php file until a patch is available.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-0413

Affected Products

Deshang Dscms

References · 9

• 🔥 https://note.zhaoj.in/share/MarH4fY66BgO · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-0413 · Security Note
• https://osv.dev/vulnerability/CVE-2024-0413 · Vendor Advisory
• https://t.me/cvenotify/67916 · Telegram Post
• https://vuldb.com/?ctiid.250433 · Note
• https://t.me/cvenotify/67221 · Telegram Post
• https://twitter.com/CVEnew/status/1745494427013947413 · Twitter Post
• https://vuldb.com/?id.250433 · Note
• https://twitter.com/VulmonFeeds/status/1745533024760897728 · Twitter Post