CVE-2024-6940

Summary

CVE-2024-6940 is a newly disclosed critical vulnerability affecting DedeCMS 5.7.114. The issue lies in an unknown part of the file article_template_rand.php, resulting in code injection. This vulnerability is remotely exploitable, allowing attackers to manipulate the system. The exploit for this flaw has been made public, increasing the risk of potential attacks. The associated identifier for this vulnerability is VDB-271995, and unfortunately, the vendor has not responded to warnings about the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.