cnvd - cnvd-2024-33894

cnvd-2024-33894

Vulnerability from cnvd

Title: DedeCMS代码注入漏洞（CNVD-2024-33894）

Description:

DedeCMS是一款流行的内容管理系统，广泛用于创建和管理网站内容，适用于企业网站、个人博客等多种应用场景。

DedeCMS 5.7.114版本中的article_template_rand.php文件存在代码注入漏洞，该漏洞源于对输入内容的处理不当，攻击者可利用该漏洞通过恶意构造的输入数据触发代码注入，可能导致任意代码执行、服务器控制、数据泄露或篡改等。

Severity: 中

Patch Name: DedeCMS代码注入漏洞（CNVD-2024-33894）的补丁

Patch Description:

DedeCMS是一款流行的内容管理系统，广泛用于创建和管理网站内容，适用于企业网站、个人博客等多种应用场景。

DedeCMS 5.7.114版本中的article_template_rand.php文件存在代码注入漏洞，该漏洞源于对输入内容的处理不当，攻击者可利用该漏洞通过恶意构造的输入数据触发代码注入，可能导致任意代码执行、服务器控制、数据泄露或篡改等。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://www.dedecms.com/

Reference: https://vuldb.com/?id.271995 https://vuldb.com/?ctiid.271995 https://vuldb.com/?submit.372810 https://gitee.com/fushuling/cve/blob/master/dedeCMS%20V5.7.114%20article_template_rand.php%20code%20injection.md

Impacted products

Name
DedeCMS DeDeCMS 5.7.114

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-6940",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-6940"
    }
  },
  "description": "DedeCMS\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\uff0c\u5e7f\u6cdb\u7528\u4e8e\u521b\u5efa\u548c\u7ba1\u7406\u7f51\u7ad9\u5185\u5bb9\uff0c\u9002\u7528\u4e8e\u4f01\u4e1a\u7f51\u7ad9\u3001\u4e2a\u4eba\u535a\u5ba2\u7b49\u591a\u79cd\u5e94\u7528\u573a\u666f\u3002\n\nDedeCMS 5.7.114\u7248\u672c\u4e2d\u7684article_template_rand.php\u6587\u4ef6\u5b58\u5728\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5bf9\u8f93\u5165\u5185\u5bb9\u7684\u5904\u7406\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u6076\u610f\u6784\u9020\u7684\u8f93\u5165\u6570\u636e\u89e6\u53d1\u4ee3\u7801\u6ce8\u5165\uff0c\u53ef\u80fd\u5bfc\u81f4\u4efb\u610f\u4ee3\u7801\u6267\u884c\u3001\u670d\u52a1\u5668\u63a7\u5236\u3001\u6570\u636e\u6cc4\u9732\u6216\u7be1\u6539\u7b49\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttps://www.dedecms.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-33894",
  "openTime": "2024-07-26",
  "patchDescription": "DedeCMS\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\uff0c\u5e7f\u6cdb\u7528\u4e8e\u521b\u5efa\u548c\u7ba1\u7406\u7f51\u7ad9\u5185\u5bb9\uff0c\u9002\u7528\u4e8e\u4f01\u4e1a\u7f51\u7ad9\u3001\u4e2a\u4eba\u535a\u5ba2\u7b49\u591a\u79cd\u5e94\u7528\u573a\u666f\u3002\r\n\r\nDedeCMS 5.7.114\u7248\u672c\u4e2d\u7684article_template_rand.php\u6587\u4ef6\u5b58\u5728\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5bf9\u8f93\u5165\u5185\u5bb9\u7684\u5904\u7406\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u6076\u610f\u6784\u9020\u7684\u8f93\u5165\u6570\u636e\u89e6\u53d1\u4ee3\u7801\u6ce8\u5165\uff0c\u53ef\u80fd\u5bfc\u81f4\u4efb\u610f\u4ee3\u7801\u6267\u884c\u3001\u670d\u52a1\u5668\u63a7\u5236\u3001\u6570\u636e\u6cc4\u9732\u6216\u7be1\u6539\u7b49\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "DedeCMS\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2024-33894\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "DedeCMS DeDeCMS 5.7.114"
  },
  "referenceLink": "https://vuldb.com/?id.271995\r\nhttps://vuldb.com/?ctiid.271995\r\nhttps://vuldb.com/?submit.372810\r\nhttps://gitee.com/fushuling/cve/blob/master/dedeCMS%20V5.7.114%20article_template_rand.php%20code%20injection.md",
  "serverity": "\u4e2d",
  "submitTime": "2024-07-23",
  "title": "DedeCMS\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2024-33894\uff09"
}

CVE-2024-6940 (GCVE-0-2024-6940)

Vulnerability from cvelistv5

Published

2024-07-21 05:31

Modified

2024-08-01 21:45

Severity ?

5.1 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4.7 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
4.7 (Medium) - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-94 - Code Injection

Summary

A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271995. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

▼	URL	Tags
	https://vuldb.com/?id.271995	vdb-entry
	https://vuldb.com/?ctiid.271995	signature, permissions-required
	https://vuldb.com/?submit.372810	third-party-advisory
	https://gitee.com/fushuling/cve/blob/master/dedeCMS%20V5.7.114%20article_template_rand.php%20code%20injection.md	exploit

Impacted products

	Vendor	Product	Version
	n/a	DedeCMS	Version: 5.7.114

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:dedecms:dedecms:5.7.114:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dedecms",
            "vendor": "dedecms",
            "versions": [
              {
                "status": "affected",
                "version": "5.7.114"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6940",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-29T18:20:19.945764Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-29T20:23:56.719Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:45:38.431Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VDB-271995 | DedeCMS article_template_rand.php code injection",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.271995"
          },
          {
            "name": "VDB-271995 | CTI Indicators (IOB, IOC, TTP, IOA)",
            "tags": [
              "signature",
              "permissions-required",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?ctiid.271995"
          },
          {
            "name": "Submit #372810 | DedeCMS 5.7.114 Code Injection",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?submit.372810"
          },
          {
            "tags": [
              "exploit",
              "x_transferred"
            ],
            "url": "https://gitee.com/fushuling/cve/blob/master/dedeCMS%20V5.7.114%20article_template_rand.php%20code%20injection.md"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DedeCMS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.114"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "fushuling233 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271995. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
        },
        {
          "lang": "de",
          "value": "Es wurde eine Schwachstelle in DedeCMS 5.7.114 ausgemacht. Sie wurde als kritisch eingestuft. Es betrifft eine unbekannte Funktion der Datei article_template_rand.php. Durch das Beeinflussen mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5.8,
            "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Code Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-21T05:31:07.684Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-271995 | DedeCMS article_template_rand.php code injection",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/?id.271995"
        },
        {
          "name": "VDB-271995 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.271995"
        },
        {
          "name": "Submit #372810 | DedeCMS 5.7.114 Code Injection",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.372810"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://gitee.com/fushuling/cve/blob/master/dedeCMS%20V5.7.114%20article_template_rand.php%20code%20injection.md"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-07-20T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2024-07-20T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2024-07-20T08:39:49.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "DedeCMS article_template_rand.php code injection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2024-6940",
    "datePublished": "2024-07-21T05:31:07.684Z",
    "dateReserved": "2024-07-20T06:34:38.892Z",
    "dateUpdated": "2024-08-01T21:45:38.431Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted