CVE-2024-34245: Path Traversal
Published May 14, 2024
·Updated
An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtmljsaction.php.
Affected Software
2 affected components
DedeCMS Dedecms
DedeCMS Dedecms=5.7.114
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·03:38 PM
Oct 27, 2024
Data Sourced
via MITRE·03:07 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-34245?
CVE-2024-34245 is considered a high severity vulnerability due to the potential for arbitrary file reading by authenticated attackers.
2
How do I fix CVE-2024-34245?
To fix CVE-2024-34245, update your DedeCMS to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2024-34245?
CVE-2024-34245 affects all authenticated users of DedeCMS v5.7.114.
4
What type of vulnerability is CVE-2024-34245?
CVE-2024-34245 is classified as an arbitrary file read vulnerability.
5
Can CVE-2024-34245 be exploited remotely?
CVE-2024-34245 requires authentication, but once authenticated, attackers can exploit it remotely to read arbitrary files.