CVE-2024-2821

Summary

CVE-2024-2821 is a newly disclosed vulnerability affecting DedeCMS 5.7. It is classified as problematic due to an issue with the file /src/dede/friendlink_edit.php. The vulnerability involves a cross-site request forgery (CSRF) weakness, which can be exploited remotely. The manipulation of the argument 'id' triggers the CSRF attack. Although the vendor has been notified, they have not responded, leaving the exploit publicly available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.