CVE-2024-28432: CSRF

Published Mar 13, 2024

Updated

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/articleedit.php.

Affected Software

2 affected components

DedeCMS Dedecms

DedeCMS Dedecms=5.7

Event History

Mar 13, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-28432?

CVE-2024-28432 is classified as a Cross-Site Request Forgery (CSRF) vulnerability which can lead to unauthorized actions being performed on behalf of a user.

How do I fix CVE-2024-28432?

To fix CVE-2024-28432, ensure that proper CSRF protection mechanisms are implemented in your DedeCMS application, particularly in the /dede/article_edit.php component.

What is affected by CVE-2024-28432?

CVE-2024-28432 specifically affects DedeCMS version 5.7.

What impact does CVE-2024-28432 have on users?

The impact of CVE-2024-28432 allows attackers to perform malicious actions without the user's consent, potentially compromising user data and application integrity.

Is there a way to test for CVE-2024-28432?

Yes, testing for CVE-2024-28432 involves attempts to forge requests to the vulnerable endpoint and checking for successful unauthorized actions.