Cyber Resilience

CVE-2023-5022

Medium

Published: 17 September 2023

Published
17 September 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0010 27.6th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-5022 is a medium-severity Absolute Path Traversal (CWE-36) vulnerability in Dedecms Dedecms. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 27.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepath leads to absolute path traversal. The associated identifier…

more

of this vulnerability is VDB-239863.

CWE(s)
CWE-36

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

dedecms
dedecms
≤ 5.7.100

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References