Vulnerabilities > CVE-2023-5022 - Absolute Path Traversal vulnerability in Dedecms

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

dedecms

CWE-36

NVD

Published: 2023-09-17

Updated: 2024-05-17

Summary

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepath leads to absolute path traversal. The associated identifier of this vulnerability is VDB-239863.

Vulnerable Configurations

Part	Description	Count
Application	Dedecms Dedecms Dedecms 5.5 Dedecms Dedecms 5.6 Dedecms Dedecms 5.7 Dedecms Dedecms 5.7.15 Dedecms Dedecms 5.7.16 Dedecms Dedecms 5.7.17 Dedecms Dedecms 5.7.18 Dedecms Dedecms 5.7.19 Dedecms Dedecms 5.7.20 Dedecms Dedecms 5.7.22 Dedecms Dedecms 5.7.23 Dedecms Dedecms 5.7.24 Dedecms Dedecms 5.7.25 Dedecms Dedecms 5.7.26 Dedecms Dedecms 5.7.27 Dedecms Dedecms 5.7.28 Dedecms Dedecms 5.7.29 Dedecms Dedecms 5.7.30 Dedecms Dedecms 5.7.31 Dedecms Dedecms 5.7.32 Dedecms Dedecms 5.7.33 Dedecms Dedecms 5.7.34 Dedecms Dedecms 5.7.35 Dedecms Dedecms 5.7.36 Dedecms Dedecms 5.7.37 Dedecms Dedecms 5.7.38 Dedecms Dedecms 5.7.39 Dedecms Dedecms 5.7.40 Dedecms Dedecms 5.7.41 Dedecms Dedecms 5.7.42 Dedecms Dedecms 5.7.43 Dedecms Dedecms 5.7.44 Dedecms Dedecms 5.7.45 Dedecms Dedecms 5.7.46 Dedecms Dedecms 5.7.47 Dedecms Dedecms 5.7.48 Dedecms Dedecms 5.7.49 Dedecms Dedecms 5.7.50 Dedecms Dedecms 5.7.58 Dedecms Dedecms 5.7.59 Dedecms Dedecms 5.7.60 Dedecms Dedecms 5.7.61 Dedecms Dedecms 5.7.62 Dedecms Dedecms 5.7.63 Dedecms Dedecms 5.7.64 Dedecms Dedecms 5.7.65 Dedecms Dedecms 5.7.66 Dedecms Dedecms 5.7.68 Dedecms Dedecms 5.7.69 Dedecms Dedecms 5.7.70 Dedecms Dedecms 5.7.71 Dedecms Dedecms 5.7.72 Dedecms Dedecms 5.7.73 Dedecms Dedecms 5.7.74 Dedecms Dedecms 5.7.75 Dedecms Dedecms 5.7.76 Dedecms Dedecms 5.7.77 Dedecms Dedecms 5.7.78 Dedecms Dedecms 5.7.79 Dedecms Dedecms 5.7.80 Dedecms Dedecms 5.7.81 Dedecms Dedecms 5.7.82 Dedecms Dedecms 5.7.83 Dedecms Dedecms 5.7.84 Dedecms Dedecms 5.7.85 Dedecms Dedecms 5.7.86 Dedecms Dedecms 5.7.87 Dedecms Dedecms 5.7.88 Dedecms Dedecms 5.7.89 Dedecms Dedecms 5.7.90 Dedecms Dedecms 5.7.91 Dedecms Dedecms 5.7.92 Dedecms Dedecms 5.7.93 Dedecms Dedecms 5.7.94 Dedecms Dedecms 5.7.95 Dedecms Dedecms 5.7.96 Dedecms Dedecms 5.7.97 Dedecms Dedecms 5.7.98 Dedecms Dedecms 5.7.99 Dedecms Dedecms 5.7.100	82

Common Weakness Enumeration (CWE)

CWE-36 - Absolute Path Traversal

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References