EXPOSURES › CVE-2023-34842

CVE-2023-34842

CRITICAL

DETAIL

SourceNVD · cve Published2023-07-31 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-34842 ↗

⚡ RCE SHAME 50/100 rce

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

dedecms · vendor dedecms · product

DESCRIPTION

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.