Vulnerability Intelligence Report
CVE-2024-35375
There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:0.47%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-434 ↗CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| dedecms | dedecms | 5.7.114 |
Threat Intelligence Signals
EPSS Score
0.469%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2024-05-17T00:00:00 |
| Published | 2024-05-23T18:53:33 |
| Last Updated | 2025-02-13T15:58:36 |
Community Chatter & Buzz