Vulnerabilities > CVE-2023-2059 - Path Traversal: '..filedir' vulnerability in Dedecms 5.7.87

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
dedecms
CWE-28

Summary

A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225944.

Vulnerable Configurations

Part Description Count
Application
Dedecms
1

Common Weakness Enumeration (CWE)