CVE-2024-52769: Malicious File Upload
Published Nov 20, 2024
·Updated
An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.
Affected Software
2 affected components
DedeBIZ DedeBIZ
DedeBIZ DedeBIZ=6.3.0
Event History
Nov 20, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-52769?
CVE-2024-52769 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2024-52769?
To fix CVE-2024-52769, you should upgrade to the latest version of DedeBIZ that addresses this vulnerability.
3
What type of vulnerability is CVE-2024-52769?
CVE-2024-52769 is an arbitrary file upload vulnerability found in the /admin/friendlink_edit component.
4
Who is affected by CVE-2024-52769?
DedeBIZ v6.3.0 users are affected by CVE-2024-52769 and should take immediate action.
5
What can attackers do with CVE-2024-52769?
Attackers can exploit CVE-2024-52769 to upload crafted files, allowing them to execute arbitrary code on the server.