CVE-2024-2820

Summary

CVE-2024-2820 is a recently disclosed vulnerability affecting DedeCMS 5.7. The issue lies in the unknown functionality of the file /src/dede/baidunews.php, which is susceptible to cross-site request forgery (CSRF) attacks. By manipulating the argument filename, an attacker can launch a CSRF attack remotely. The exploit for this vulnerability, identified as VDB-257707, has been made public, increasing the risk of potential attacks. Despite early notification to the vendor, they have failed to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.