Security Advisory

CVE-2024-29684

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-26 00:00:00
Last updated 2024-08-06 14:16:25
Assigner mitre
State PUBLISHED

Description

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attacker to execute arbitrary code.