Medium severity6.5NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-34245

Description

An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php.

Affected products

Dedecms/Dedecms3 versions
cpe:2.3:a:dedecms:dedecms:5.7.114:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dedecms:dedecms:5.7.114:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: v5.7.114

Patches

Vulnerability mechanics

References

github.com/Stoocea/Vulnerability-analysis-Notes/blob/main/cms/DedeCMS-V5.7.114%20%20Arbitrary%20file%20read%20vulnerability.mdnvdBroken LinkExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000