CVE-2024-28678 - DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php

MEDIUM

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php

Published Mar 13, 2024

6.3

MEDIUM

CVSS 3.1

EPSS 0.23%

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
5.7	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://github.com/777erp/cms/blob/main/15.md		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 13, 2024

Updated Aug 26, 2024

Reserved Mar 8, 2024

Updated Aug 26, 2024

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a