PT-2024-22954 · Dedecms · Dedecms

Published 2024-04-22 · Updated 2024-08-01 · CVE-2024-29661

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7

Description A File Upload issue allows a local attacker to execute arbitrary code via a crafted payload.

Recommendations For DedeCMS version 5.7, update to a version that fixes this issue, if available, or consider disabling file upload functionality as a temporary workaround until a patch is available.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-29661

Affected Products

Dedecms

References · 3

• 🔥 https://github.com/ysl1415926/cve/blob/main/DedeCMSv5.7_getshell.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-29661 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29661 · Security Note