CVE-2023-3578
MediumCVSS 5.5Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
A critical vulnerability was found in DedeCMS version 5.7.109, affecting an unknown functionality of the file co_do.php. Manipulation of the argument rssurl leads to server-side request forgery.
Risk Assessment
This vulnerability can be exploited by attackers to perform attacks on the server, potentially leading to data exposure or system takeover.
Recommendation
It is recommended to update DedeCMS to the latest version and monitor server logs for potential exploitation attempts.
Original NVD description (English source)
A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233371.