CVE-2024-0358

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 10, 2024
Updated: May 17, 2024
CWE ID 284

Summary

CVE-2024-0358 is a newly disclosed critical vulnerability affecting DeShang DSO2O up to version 4.1.0. The issue lies in an unknown part of the /install/install.php file and results in improper access controls. An attacker can exploit this remotely, leading to potential unauthorized access. The vulnerability has been made public, increasing the risk of exploitation. Vulnerability Database (VDB) has assigned the identifier VDB-250125 to this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share