CVE-2024-29661: Malicious File Upload
Published Apr 22, 2024
·Updated
A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload.
Affected Software
2 affected components
DedeCMS Dedecms
DedeCMS Dedecms=5.7
Event History
Apr 22, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-29661?
CVE-2024-29661 is categorized as a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2024-29661?
To fix CVE-2024-29661, update DedeCMS to the latest version which contains patches for this vulnerability.
3
What are the potential impacts of CVE-2024-29661?
The potential impacts of CVE-2024-29661 include unauthorized access to the system and execution of malicious payloads.
4
Who is affected by CVE-2024-29661?
DedeCMS v5.7 users are affected by CVE-2024-29661, particularly those who allow file uploads.
5
Can this vulnerability be exploited remotely?
CVE-2024-29661 allows for local exploitation, meaning an attacker must have local access to the system to exploit it.