VULNERABILITY INTELLIGENCE

CVE-2024-11138

CVSS score9.8 CRITICAL

EPSS probability2.61%

CISA KEVNot currently listed

Published2024-11-12

Last modified2026-06-17

Description

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.